Edit tour

Windows Analysis Report
11sds_Invoice_9334749.html

Overview

General Information

Sample name:	11sds_Invoice_9334749.html
Analysis ID:	1556936
MD5:	e2a8a5ab67e66241372b6e3152ac52d2
SHA1:	2ccc4c4fed431627229108c0178e8aaaf29648a9
SHA256:	5bf175a92bcc58478f661b504ecdd7c2011631a78e7e3231553f4984fd793e68
Tags:	fit-retired-athletics-marathon--trycloudflare--comhtmluser-JAMESWT_MHT
Infos:

Detection

WinSearchAbuse

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Yara detected WinSearchAbuse

HTML document with suspicious name

HTML document with suspicious title

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE file contains more sections than normal

PE file contains sections with non-standard names

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\11sds_Invoice_9334749.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2224,i,12584006983949288172,8811238237139419842,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
11sds_Invoice_9334749.html	JoeSecurity_WinSearchAbuse	Yara detected WinSearchAbuse	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_WinSearchAbuse	Yara detected WinSearchAbuse	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: 11sds_Invoice_9334749.html

Virustotal: Detection: 17%

Perma Link

Phishing

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/11sds_Invoice_9334749.html

Tab title: RECEIPT580328018732JKSRA

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\LICENSE.txt

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49915 version: TLS 1.2

Source:

Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr

Software Vulnerabilities

Yara detected WinSearchAbuse

Source: Yara match	File source: 11sds_Invoice_9334749.html, type: SAMPLE
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Source: global traffic

TCP traffic: 192.168.2.5:56915 -> 1.1.1.1:53

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /blog/wp-content/uploads/2016/05/build-10158.png HTTP/1.1Host: winaero.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blog/wp-content/uploads/2016/05/build-10158.png HTTP/1.1Host: winaero.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=x9wyOBKU52cnx71&MD=ygh4R1yT HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=x9wyOBKU52cnx71&MD=ygh4R1yT HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: winaero.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://123milhas.com/v2/busca/confirmacao-pedido/.
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout-new.dafiti.com.br/success/index.html.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.casasbahia.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.extra.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.pontofrio.com.br/compra-finalizada
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://comprasegura.olx.com.br/
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://comprasegura.olx.com.br/pedidos/.
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://dump-truck.appspot.com/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://emv-qr.googleplex.com/.
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://google-wallet-ccr-salvador.pagmob.com.br/pay
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://m.aliexpress.com/p/second-payment/pay-result.html?.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://m.americanas.com.br/compra/pix.
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://rsolomakhin.github.io/pix/.
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://sacolamobile.magazineluiza.com.br/#/comprovante
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://secure.epocacosmeticos.com.br/checkout/#/payment.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://secure.vivara.com.br/checkout?orderFormId=.
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://shopee.com.br/payment/.
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: 11sds_Invoice_9334749.html	String found in binary or memory: https://winaero.com/blog/wp-content/uploads/2016/05/build-10158.png
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.amazon.com.br/gp/buy/thankyou/handlers/display.html
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.anacapri.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.arezzo.com.br/checkout/order-confirmation/.
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.centauro.com.br/checkouts/confirmacao/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.cobasi.com.br/checkout/review.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.elo7.com.br/buyer/order/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.fastshop.com.br/web/checkout-v2/pagamento/confirmacao.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.hering.com.br/checkout/#/payment
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.hurb.com/br/pay/checkout/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.ifood.com.br/pedidos/aguardando-pagamento/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.madeiramadeira.com.br/carrinho/finalizar-pedido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.motorola.com.br/checkout/#/payment
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.natura.com.br/pedido-concluido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.netshoes.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.paodeacucar.com/checkout.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.petz.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.riachuelo.com.br/successpage
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.schutz.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.sephora.com.br/checkout/success/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.ultrafarma.com.br/checkout/confirmacao/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.zattini.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.zzmall.com.br/checkout/order-confirmation/.
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn
Source: sets.json.0.dr	String found in binary or memory: https://zoom.com
Source: sets.json.0.dr	String found in binary or memory: https://zoom.us

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 56926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 56916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56918
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56917
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56929
Source: unknown	Network traffic detected: HTTP traffic on port 56934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56924
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56920
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56937
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56933
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56930
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56931
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49915 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: 11sds_Invoice_9334749.html

Initial sample: invoice

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\cr_en-us_500000_index.bin	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\optimization-hints.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\keys.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3060_1751508424

Jump to behavior

Source: Google.Widevine.CDM.dll.0.dr

Static PE information: Number of sections : 12 > 10

Source: classification engine

Classification label: mal64.phis.expl.winHTML@32/36@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: 11sds_Invoice_9334749.html

Virustotal: Detection: 17%

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\11sds_Invoice_9334749.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2224,i,12584006983949288172,8811238237139419842,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2224,i,12584006983949288172,8811238237139419842,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source:

Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr

Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: _RDATA

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\LICENSE.txt

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	21 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
11sds_Invoice_9334749.html	11%	ReversingLabs	Document-HTML.Exploit.Generic
11sds_Invoice_9334749.html	17%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\Google.Widevine.CDM.dll	0%	ReversingLabs
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\Google.Widevine.CDM.dll	0%	Virustotal		Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
file:///C:/Users/user/Desktop/11sds_Invoice_9334749.html	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
winaero.com	68.183.112.81	true	false		high
www.google.com	142.250.186.164	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://winaero.com/blog/wp-content/uploads/2016/05/build-10158.png	false		high
file:///C:/Users/user/Desktop/11sds_Invoice_9334749.html	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	high
https://mercadoshops.com.co	sets.json.0.dr	false	high
https://gliadomain.com	sets.json.0.dr	false	high
https://poalim.xyz	sets.json.0.dr	false	high
https://comprasegura.olx.com.br/pedidos/.	optimization-hints.pb.0.dr	false	high
https://mercadolivre.com	sets.json.0.dr	false	high
https://easylist.to/)	LICENSE.txt.0.dr	false	high
https://reshim.org	sets.json.0.dr	false	high
https://nourishingpursuits.com	sets.json.0.dr	false	high
https://medonet.pl	sets.json.0.dr	false	high
https://unotv.com	sets.json.0.dr	false	high
https://mercadoshops.com.br	sets.json.0.dr	false	high
https://joyreactor.cc	sets.json.0.dr	false	high
https://zdrowietvn.pl	sets.json.0.dr	false	high
https://johndeere.com	sets.json.0.dr	false	high
https://songstats.com	sets.json.0.dr	false	high
https://baomoi.com	sets.json.0.dr	false	high
https://supereva.it	sets.json.0.dr	false	high
https://elfinancierocr.com	sets.json.0.dr	false	high
https://www.motorola.com.br/checkout/#/payment	optimization-hints.pb.0.dr	false	high
https://bolasport.com	sets.json.0.dr	false	high
https://rws1nvtvt.com	sets.json.0.dr	false	high
https://www.cobasi.com.br/checkout/review.	optimization-hints.pb.0.dr	false	high
https://desimartini.com	sets.json.0.dr	false	high
https://hearty.app	sets.json.0.dr	false	high
https://emv-qr.googleplex.com/.	optimization-hints.pb.0.dr	false	high
https://hearty.gift	sets.json.0.dr	false	high
https://mercadoshops.com	sets.json.0.dr	false	high
https://heartymail.com	sets.json.0.dr	false	high
https://nlc.hu	sets.json.0.dr	false	high
https://www.paodeacucar.com/checkout.	optimization-hints.pb.0.dr	false	high
https://p106.net	sets.json.0.dr	false	high
https://radio2.be	sets.json.0.dr	false	high
https://finn.no	sets.json.0.dr	false	high
https://hc1.com	sets.json.0.dr	false	high
https://kompas.tv	sets.json.0.dr	false	high
https://mystudentdashboard.com	sets.json.0.dr	false	high
https://songshare.com	sets.json.0.dr	false	high
https://smaker.pl	sets.json.0.dr	false	high
https://mercadopago.com.mx	sets.json.0.dr	false	high
https://www.zzmall.com.br/checkout/order-confirmation/.	optimization-hints.pb.0.dr	false	high
https://p24.hu	sets.json.0.dr	false	high
https://talkdeskqaid.com	sets.json.0.dr	false	high
https://24.hu	sets.json.0.dr	false	high
https://mercadopago.com.pe	sets.json.0.dr	false	high
https://cardsayings.net	sets.json.0.dr	false	high
https://text.com	sets.json.0.dr	false	high
https://mightytext.net	sets.json.0.dr	false	high
https://pudelek.pl	sets.json.0.dr	false	high
https://hazipatika.com	sets.json.0.dr	false	high
https://joyreactor.com	sets.json.0.dr	false	high
https://cookreactor.com	sets.json.0.dr	false	high
https://wildixin.com	sets.json.0.dr	false	high
https://eworkbookcloud.com	sets.json.0.dr	false	high
https://cognitiveai.ru	sets.json.0.dr	false	high
https://nacion.com	sets.json.0.dr	false	high
https://checkout-new.dafiti.com.br/success/index.html.	optimization-hints.pb.0.dr	false	high
https://chennien.com	sets.json.0.dr	false	high
https://drimer.travel	sets.json.0.dr	false	high
https://deccoria.pl	sets.json.0.dr	false	high
https://mercadopago.cl	sets.json.0.dr	false	high
https://talkdeskstgid.com	sets.json.0.dr	false	high
https://naukri.com	sets.json.0.dr	false	high
https://interia.pl	sets.json.0.dr	false	high
https://bonvivir.com	sets.json.0.dr	false	high
https://carcostadvisor.be	sets.json.0.dr	false	high
https://salemovetravel.com	sets.json.0.dr	false	high
https://sapo.io	sets.json.0.dr	false	high
https://wpext.pl	sets.json.0.dr	false	high
https://www.natura.com.br/pedido-concluido/.	optimization-hints.pb.0.dr	false	high
https://welt.de	sets.json.0.dr	false	high
https://poalim.site	sets.json.0.dr	false	high
https://drimer.io	sets.json.0.dr	false	high
https://infoedgeindia.com	sets.json.0.dr	false	high
https://blackrockadvisorelite.it	sets.json.0.dr	false	high
https://cognitive-ai.ru	sets.json.0.dr	false	high
https://comprasegura.olx.com.br/	optimization-hints.pb.0.dr	false	high
https://cafemedia.com	sets.json.0.dr	false	high
https://graziadaily.co.uk	sets.json.0.dr	false	high
https://thirdspace.org.au	sets.json.0.dr	false	high
https://mercadoshops.com.ar	sets.json.0.dr	false	high
https://smpn106jkt.sch.id	sets.json.0.dr	false	high
https://elpais.uy	sets.json.0.dr	false	high
https://landyrev.com	sets.json.0.dr	false	high
https://www.hurb.com/br/pay/checkout/.	optimization-hints.pb.0.dr	false	high
https://the42.ie	sets.json.0.dr	false	high
https://commentcamarche.com	sets.json.0.dr	false	high
https://tucarro.com.ve	sets.json.0.dr	false	high
https://rws3nvtvt.com	sets.json.0.dr	false	high
https://eleconomista.net	sets.json.0.dr	false	high
https://helpdesk.com	sets.json.0.dr	false	high
https://mercadolivre.com.br	sets.json.0.dr	false	high
https://clmbtech.com	sets.json.0.dr	false	high
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	high
https://07c225f3.online	sets.json.0.dr	false	high
https://salemovefinancial.com	sets.json.0.dr	false	high
https://mercadopago.com.br	sets.json.0.dr	false	high
https://zoom.us	sets.json.0.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
68.183.112.81	winaero.com	United States	14061	DIGITALOCEAN-ASNUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556936
Start date and time:	2024-11-16 16:43:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	11sds_Invoice_9334749.html
Detection:	MAL
Classification:	mal64.phis.expl.winHTML@32/36@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.23.99, 142.250.185.206, 74.125.206.84, 34.104.35.123, 172.217.18.10, 142.250.184.234, 172.217.16.202, 142.250.185.138, 142.250.184.202, 216.58.206.74, 216.58.212.170, 172.217.23.106, 142.250.186.74, 142.250.185.106, 142.250.186.138, 142.250.185.170, 172.217.16.138, 142.250.185.74, 142.250.186.106, 142.250.186.42, 199.232.210.172, 192.229.221.95, 142.250.186.163, 142.250.186.110, 142.250.185.67
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
68.183.112.81	FSVAUIEMDNKSA_Invoice_Pdf.html	Get hash	malicious	WinSearchAbuse	Browse
	Cursor Commander.exe	Get hash	malicious	Unknown	Browse
	https://foundersedition.lk/invoice_receipt.html	Get hash	malicious	WinSearchAbuse	Browse
239.255.255.250	FSVAUIEMDNKSA_Invoice_Pdf.html	Get hash	malicious	WinSearchAbuse	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
winaero.com	FSVAUIEMDNKSA_Invoice_Pdf.html	Get hash	malicious	WinSearchAbuse	Browse	68.183.112.81
	Cursor Commander.exe	Get hash	malicious	Unknown	Browse	68.183.112.81
	https://foundersedition.lk/invoice_receipt.html	Get hash	malicious	WinSearchAbuse	Browse	68.183.112.81

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DIGITALOCEAN-ASNUS	FSVAUIEMDNKSA_Invoice_Pdf.html	Get hash	malicious	WinSearchAbuse	Browse	68.183.112.81
	Setup.exe	Get hash	malicious	Unknown	Browse	167.99.235.203
	https://mail.outlook-365.com/0fslgu3q29ktmq2d	Get hash	malicious	Unknown	Browse	68.183.142.105
	https://www.photogallerybd.com/n/?c3Y9bzM2NV8xX29uZSZyYW5kPWMydFJkbWs9JnVpZD1VU0VSMjgxMDIwMjRVMjQxMDI4NTQ=N0123N	Get hash	malicious	Mamba2FA	Browse	165.22.49.66
	http://deepai.org	Get hash	malicious	LiteHTTP Bot	Browse	159.89.246.130
	RuntimeusererVers.exe	Get hash	malicious	Python Stealer	Browse	159.89.102.253
	Hire P.O.exe	Get hash	malicious	FormBook	Browse	167.172.133.32
	https://0nline1.hao123com.site/?LqbtQF9CuNBmOCSgs5m	Get hash	malicious	HTMLPhisher	Browse	167.172.98.117
	https://google-databricks.com/?uniq_id=b92ZeoM	Get hash	malicious	Unknown	Browse	104.131.67.145
	file.exe	Get hash	malicious	CStealer	Browse	159.89.102.253

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	FSVAUIEMDNKSA_Invoice_Pdf.html	Get hash	malicious	WinSearchAbuse	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	hoD5yzplb1.exe	Get hash	malicious	IcedID	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	hoD5yzplb1.exe	Get hash	malicious	IcedID	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\Google.Widevine.CDM.dll	Request_for_Title_Commitment.html	Get hash	malicious	Unknown	Browse
	Must-School-Districts-In-California-Offer-Free-Healthcare-For-Employees.exe	Get hash	malicious	Unknown	Browse
	E7X-XIZ5.eml	Get hash	malicious	Unknown	Browse
	Eversheds-sutherland-INV39212-3_230470352.doc	Get hash	malicious	Unknown	Browse
	THE COSTS INCURRED PENDING (1).pdf	Get hash	malicious	Unknown	Browse
	Complete_with_DocuSign_49584.pdf	Get hash	malicious	HTMLPhisher	Browse
	#U25b6#Ufe0fVoice_mail_02309_wav0015.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	Transcript_Sh03 summit bhc.html	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	https://bistrodereformas.com.br/wp-content/plugins/z-downloads/index.php?token=2Oi6iEOKcKnCLIPdSJjn	Get hash	malicious	Unknown	Browse
	j0mvnOAe.htm	Get hash	malicious	CAPTCHA Scam ClickFix	Browse

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 16 14:44:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.980714371040015
Encrypted:	false
SSDEEP:	48:8hdLTTjqHhidAKZdA19ehwiZUklqehvy+3:8XbU8y
MD5:	ADE2A5E698CF70E5394CCCF9DE27BC66
SHA1:	549F4A7F351028E39F2B79B2B9D5589F332A6141
SHA-256:	C1DDFA478968E6759FF771C394FA68371E196D51879E90D91F41D54267B77F35
SHA-512:	B339062024C103E4A6326F7498C274609BF2CEDA5CA24EE6DD086875E8C7B52CB9550119E618B70ACD6844FCE965E70382BE6DF4F7ACAF460F6AB526288D05C8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......[>8..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IpY.}....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VpY.}....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VpY.}....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VpY.}..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VpY.}...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 16 14:44:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997194480742971
Encrypted:	false
SSDEEP:	48:8gdLTTjqHhidAKZdA1weh/iZUkAQkqehsy+2:8obm9Qdy
MD5:	9A3490919620731A6A1592D39B6B1FA0
SHA1:	DD56CEBFE720CB17523405DC8B7A331035198066
SHA-256:	95FA7BC3E4E8C852D810181284679912EA32A18856E31A10D62D62036FE51687
SHA-512:	DB42A593A995980FC5D5A37C5E69BB508C432D407B8C8831CB3FEB553D26927B5BA057EAA2C9112111E4B71DFD0DD1F84BD002358F5F3593F4C33C130F18FA2A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......z[>8..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IpY.}....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VpY.}....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VpY.}....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VpY.}..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VpY.}...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007346465902547
Encrypted:	false
SSDEEP:	48:8xcdLTTjsHhidAKZdA14tseh7sFiZUkmgqeh7sCy+BX:8x8bcn4y
MD5:	57BC3AC4ABC86551EEA28EC5B841389A
SHA1:	7318B6B10B35448E4D4309AE48CDEA20EB6DD4BA
SHA-256:	AE0FE538ED24F3BF1D728AFD0DEF1696CD53FD45466519FCCC0C50936BA81421
SHA-512:	0023C6CE4AB9BB8BB9C77A754F55AB758D6F7DA9F7DE025687EFA0BD9E8A06F4B7D74EEAE952A9BDCD634F878F37D0DF6DD7CEA6319ED9CF728B445C89E77FC0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IpY.}....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VpY.}....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VpY.}....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VpY.}..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 16 14:44:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9929018460433316
Encrypted:	false
SSDEEP:	48:8OdLTTjqHhidAKZdA1vehDiZUkwqehQy+R:8Wbt6y
MD5:	E329FEEDE9F1D78350181527CC37F789
SHA1:	9F3090690900E18BA2682E76E884A895D36274DD
SHA-256:	76C0B2A4B57AD97A7A7FE080ED2763D7A49971EECBA3EBD851DED9A9780A9E6F
SHA-512:	0F4020FA9A4FC32DF0EAB49DB38482ABBB0BD79C6709F86D9CBE77A50142E3EBBFF19BC6A6E3B4532D45CFE8370103D64824F7E68BA18C618505B7BE11755ED1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....[t[>8..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IpY.}....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VpY.}....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VpY.}....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VpY.}..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VpY.}...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 16 14:44:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9858327524002064
Encrypted:	false
SSDEEP:	48:8zdLTTjqHhidAKZdA1hehBiZUk1W1qeh+y+C:8xbt9ey
MD5:	A3C1749D7622FBFC8D5AB83D68074C16
SHA1:	D98EDAFD6F3DF65503BBC9B6E5BAB938C26D100D
SHA-256:	4A1C118349672BF0F7F9B636EFD11DE24C4BE77B46F04EE60D4A581BB95A3C4C
SHA-512:	32EE25882B525284351B51CC9A077F9EEC56F796CAFF3F1DA4442C51B0CF10E0B8604C8E8B2F00A61A27F760A39B1D5C4138912D258FA5E5B68B2C70D8408209
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....JQ.[>8..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IpY.}....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VpY.}....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VpY.}....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VpY.}..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VpY.}...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Nov 16 14:44:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9929375710477295
Encrypted:	false
SSDEEP:	48:8nfdLTTjqHhidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb4y+yT+:8VbxT/TbxWOvTb4y7T
MD5:	F3D0BC42FA51FE2C3916E21262CBE815
SHA1:	0F4B66C3E5EE78E08EE163A757D0E9939DB7E1A6
SHA-256:	3FC40CBA1F624B7EB7C3104B11F3FCC06E4F73DE4875268698094B8A05A5254A
SHA-512:	47B3967C6A0137F886B32FC1DBC41A3FFEBB553DB53D4FA9015A723ABBACB2B6F84A6387CFEEDCD45E4B1D4609F2B7D18DC9496371D892C263469F7906C2DBFB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....>.j[>8..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IpY.}....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VpY.}....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VpY.}....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VpY.}..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VpY.}...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.018989605004616
Encrypted:	false
SSDEEP:	48:p/hUI1OwEU3AdIq7ak68O40E2szOxxUJ8BPFkf31U4PrHfqY3J5D:RnOwtQIq7aZ40E2sYUJAYRr/qYZ5D
MD5:	C4709C1D483C9233A3A66A7E157624EA
SHA1:	99A000EB5FE5CC1E94E3155EE075CD6E43DC7582
SHA-256:	225243DC75352D63B0B9B2F48C8AAA09D55F3FB9E385741B12A1956A941880D9
SHA-512:	B45E1FD999D1340CC5EB5A49A4CD967DC736EA3F4EC8B02227577CC3D1E903341BE3217FBB0B74765C72085AC51C63EEF6DCB169D137BBAF3CC49E21EA6468D7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"lGxZ1-AH7F8MftKSBdZiFULmC8hZkIHy1_2XIoU81Z5mK0wHVwNV7-55CBTcuuvKjTje-AnKLDoG4S0A_Jeg4lSQK5V_Q4f6JVqp5Vj_ge86YkRZEv4m1bjKRY4N17SHobwuH8Hc_kAugFIlG1LIDHnrm1N7ZWIqo3fVlnVqgSstmvFXAhBazgs1UYRi3hPjPM6e1q1i2N1mIUbxLvG41frGo2QJ8W5J3buUjzs-0y250k-YkadKAR0

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.820000180714897
Encrypted:	false
SSDEEP:	3:SVzHL3phUmWRDNKydvgHVz:SBHLLUmWRbCp
MD5:	BBEC7670A2519FEB0627F17D0C0B5276
SHA1:	9C30B996F1B069F86EF7C0136DFAF7E614674DEA
SHA-256:	670A6F6BBADAB2C2BE63898525FCAF72E7454739E77C04D120BC1A46B6694CAC
SHA-512:	1ED4ED6AE2A2CBE86F9E8C6C7A2672EBB2F37DBE83D2BF09D875DB435ED63BF5F5CF60CA846865166F9A498095F6D61BD51B0A092E097430439E8A5A3A14CB15
Malicious:	false
Preview:	1.03cccbb22b17080279ea1707c9ab093c59f4f4dd09580c841cfa794cb372228d

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.462192586591686
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1kULJVPY:F6VlM8aRWpqS1kSJVg
MD5:	084E339C0C9FE898102815EAC9A7CDEA
SHA1:	6ABF7EAAA407D2EAB8706361E5A2E5F776D6C644
SHA-256:	52CD62F4AC1F9E7D7C4944EE111F84A42337D16D5DE7BE296E945146D6D7DC15
SHA-512:	0B67A89F3EBFF6FEC3796F481EC2AFBAC233CF64FDC618EC6BA1C12AE125F28B27EE09E8CD0FADB8F6C8785C83929EA6F751E0DDF592DD072AB2CF439BD28534
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.11.8.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9817
Entropy (8bit):	4.629347296880043
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5C4ql7BkIVmtRTGXvcxBsl
MD5:	8C702C686B703020BC0290BAFC90D7A0
SHA1:	EB08FF7885B4C1DE3EF3D61E40697C0C71903E27
SHA-256:	97D9E39021512305820F27B9662F0351E45639124F5BD29F0466E9072A9D0C62
SHA-512:	6137D0ED10E6A27924ED3AB6A0C5F9B21EB0E16A876447DADABD88338198F31BB9D89EF8F0630F4573EA34A24FB3FD3365D7EA78A97BA10028A0758E0A550739
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	74598
Entropy (8bit):	5.5368864380577545
Encrypted:	false
SSDEEP:	1536:7geXUzNNSGg1dSkNp+z55w4kgNmmO6I7kWvQFlGlHUvkS6xt/GL95vkdwz:sDRNfgr9NpK5wl+1O6IoWQFlGlHLS6xQ
MD5:	C6AF15DA82A8A9172FC9CAFC969DE4F9
SHA1:	81F477E181036D551EF6F09CB875C6B280BEBE00
SHA-256:	782009D9765C6104A1B4D1EAC553834E7E399D749A082EAD42BB47ABB42895B5
SHA-512:	F541CB1703A0BD31FCB6E293ACBC6E20F73B365FF8D2270A6D44780E9D5731B8D7803AECACD49D73E0DA065DD1026C9FA95F9CAD2BF0776CE1E2C3C9FCA052C6
Malicious:	false
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.just-news.pro^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.thubanoa.com^..........0.8.@.R.abh.jp^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.adrecover.com^..........0.8.@.R.pemsrv.com^..........0.8.@.R.mnaspm.com^..........0.8.@.R..ar/ads/.,........0.8.@.R.mysmth.net/nForum//ADAgent_.>...........worldstar.com0.8.@.R.js.assemblyexchange.com/wana..(........0.8.@.R.ogads-pa.googleapis.com^..........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^.(........0.8.@.R.shikoku-np.co.jp/img/ad/..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.clicktripz.com^..........0.8.@.R.-ad-manager/........0.8.@.R.files.slack.com^.$........0.8.@.R.admitad-connect.com^..........0.8.@.R./300-250-.2........0.8.@.R"cloud

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.97509175092227
Encrypted:	false
SSDEEP:	24:pZRj/flTHY4NukYbKcFjeT3U8zkaoX+UqiF46u9ILn9oXUMzniumZ39TzIS/Xre:p/h44SbKcETEwkakBa6F9kUpumZR/Xi
MD5:	951BA6192A41622EC0E04174E1EFA31C
SHA1:	2C63243A5589671BF649FA049542308D3D7EB40E
SHA-256:	EA426C8FDAFABF1B3162C206175A17100613C85A0C30DDCDC0A3434232B69D59
SHA-512:	F9C612AA2848C01C2A3294378E6707AE92638FC5EF4C6C911D400AA981418AEF0334DBFAB1D954E0666ECDD5AB8B1506354D9C6DCF6D3D1459FAC2AD06F9E23E
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJGaWx0ZXJpbmcgUnVsZXMiLCJyb290X2hhc2giOiJ1VkRrWHp2UWlFeHdiRGtPWHNQdWtuXzI3ZGdIbGhPdDRQeENEZ0JnUXhRIn0seyJwYXRoIjoiTElDRU5TRS50eHQiLCJyb290X2hhc2giOiIyaWswNmk0TFlCdVNHNWphRGFIS253NE9pdnVSRzZsQ0JKMVk0TGtzRFJJIn0seyJwYXRoIjoibWFuaWZlc3QuanNvbiIsInJvb3RfaGFzaCI6IlhiOTU4SjJabnFtQzJRMzBYclJFNl9acURIQU9VZFRKaFdyNzV6SnVuV2sifV0sImZvcm1hdCI6InRyZWVoYXNoIiwiaGFzaF9ibG9ja19zaXplIjo0MDk2fV0sIml0ZW1faWQiOiJnY21qa21nZGxnbmtrY29jbW9laW1pbmFpam1tam5paSIsIml0ZW1fdmVyc2lvbiI6IjkuNTIuMCIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"534ZoaSA4vZpcy0b1OYq4wgLlduJCzBpUCZnNXyx3UoH1ihy6uYapK85BVjJa1ptpN9OiT86GN1r8DNZlX69tLTIyTb7lSKoX31Sef3uvZpSLJBlIGI1173pGoj52Eu77I4DraCiKTVQ4mtVLBee579FqGijozIApfrepXVZeIes4wac06yB06DuFkdEg_jnCv3xR2twcNzidsDVTw7W-VOezjdZgjousBDON_Pumwd7_4ze5

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8945408555413215
Encrypted:	false
SSDEEP:	3:SjWMQ0GiUVfkCzNMEkDRApvTD:SjWR/3tkNApvTD
MD5:	87190EF44A670A5418E7E6B26DA5CF02
SHA1:	7F24A0F6E188CA285526C968359D5DEEB0CA3F1C
SHA-256:	B9C7B754CFFECA3981CA26BCFEC1FA9988070C8657AE9DA3CA2EA7944E16AB00
SHA-512:	2980EBB51CCEE91B7F887A49D495BA9E3F4D0274AA6D4D0A3E8E4D3E3661815FB825C6D44DAFA34285E3625F979084FFAD5D54E8AE0B9E12ABFEF5C2F71E568C
Malicious:	false
Preview:	1.b48b30af5ce18c96128bfff9d2755c7932a1f32adc66f68322f7dd505db9626f

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.547350270682037
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1HVgn:F6VlMZWuMt5SKPS16n
MD5:	3EE731D0E5BFB74CACB3D9E2DFDC7768
SHA1:	EE15CB60213BB402FD90308F0F67D7B6160C9751
SHA-256:	5DBF79F09D999EA982D90DF45EB444EBF66A0C700E51D4C9856AFBE7326E9D69
SHA-512:	F38E3FEDD392F9B273565CBE321A56051EDAF48DB75A0EBB539D57E8D1238D4BAC41E973F037395F9C5D4A189DF5E68726ED2C000134FC36BB7E7295C9A779C1
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.52.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Joe Sandbox View:	Filename: Request_for_Title_Commitment.html, Detection: malicious, Browse Filename: Must-School-Districts-In-California-Offer-Free-Healthcare-For-Employees.exe, Detection: malicious, Browse Filename: E7X-XIZ5.eml, Detection: malicious, Browse Filename: Eversheds-sutherland-INV39212-3_230470352.doc, Detection: malicious, Browse Filename: THE COSTS INCURRED PENDING (1).pdf, Detection: malicious, Browse Filename: Complete_with_DocuSign_49584.pdf, Detection: malicious, Browse Filename: #U25b6#Ufe0fVoice_mail_02309_wav0015.html, Detection: malicious, Browse Filename: Transcript_Sh03 summit bhc.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: j0mvnOAe.htm, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1766
Entropy (8bit):	6.02980548978209
Encrypted:	false
SSDEEP:	48:p/honJOXVAdTwEv0JkAkako3CwPjCh0BCBeDk3c94cYH0x:RxVyl1a2cCh09D3+cY0
MD5:	82F064A0770DE978466A66FB6360B076
SHA1:	01F8AA63ECBB24753FF4EE7A8FACEBEF627E9245
SHA-256:	E8F4663E85DE840451FF0507D619261B775E0918218E9FC130954A8613187395
SHA-512:	C73B935AC0D333BDEAC47DC23827C437FA6C07714E2D94CAFA1E7BF445BA6FC4B376F50CE878E36AD5DF42E450D0E05564DF319B673DFBEF1DBAAA4FA9600D0F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoieWIzN3lEeWJCVGFYOG5TSjM5VGgtNWRLM21ucVBPNXpnLXNQYmFRWk82OCJ9LHsicGF0aCI6Im9wdGltaXphdGlvbi1oaW50cy5wYiIsInJvb3RfaGFzaCI6ImNGNFEzVll2UHJIbWZ0b3JnQzl2U3FxbnZjWjdVcHF3bmFQMUpndHJySzAifV0sImZvcm1hdCI6InRyZWVoYXNoIiwiaGFzaF9ibG9ja19zaXplIjo0MDk2fV0sIml0ZW1faWQiOiJsbWVsZ2xlamhlbWVqZ2lucGJvYWdkZGdkZmJlcGdtcCIsIml0ZW1fdmVyc2lvbiI6IjQ3NiIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"TQf9HM1KcfMsDq6xSp2ZXZlAkSqAjyYQ4rxk7i9BYvYaqbL0sHXdE_s-Jwxc1EeP0RiWMvDwVcIdWWgGjI8sBxhPvXg3OuoTJMu-58UrkFl8fIH7zk5q0PZcfl56LrFNlKGjuTMKQ-f-vMtskZngLTSs5B_Q4QCEZeFTbFYysvfu02ZsclQA0ZodrvB1PBBmbqz6B1qOtnelaNTGupe8NhELMZG0hFi5MxOb1Vm0npmlS9hIkyUdlfUhfuyFT92p9HzIpct-ok6L5NC9pTNsmCTQxQDujzrq3N3LZqw8CFe8pfRyX9mvOKm26EGT1Nskp0zaU19XFiHJgRtioR8u36XgR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.911543271320449
Encrypted:	false
SSDEEP:	3:SFVGEu9adNNQck4Xn:SX4kNNJk4X
MD5:	C3A7A8744CFCB6F11D8C14C5220FB1A9
SHA1:	5B308316265A6FD6641908A546C4FA41C668A0A1
SHA-256:	21EB4467E92B1AF33B00A2C9C7C62B6586C936BA732BD9954D1119391D9EF922
SHA-512:	10B502AC6190FA016E0D05AE5CA45C204C34E57BF217249D2DF0917D4EE9224D4F3AC67BB9DF7FC749428EEDE7A6F61F8F0926970D5F59872074E8B1F0629FBF
Malicious:	false
Preview:	1.b17482c18814a2faff9ab6765b437f06d036f883ad4ea2fd1134d74a9723b8ce

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.481149880283266
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFzIe4/+S1qpHHhHcDKhtH8tAn:F6VlMQ/+S1qphSKH8tAn
MD5:	3CB98B2C055D297C8E4EF6A9283A5560
SHA1:	2A0AE8C8F792B64666ACB172D46D010C394C03BF
SHA-256:	C9BDFBC83C9B053697F27489DFD4E1FB974ADE69EA3CEE7383EB0F6DA4193BAF
SHA-512:	AF98E21297B20D437B4DF2477FF4F276EDFD06E1BE55E53B07F80C014314A14B64A6FDA822321C1A0D05E342184FB3B72217210191F4BABC691748BC95F56E3B
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Optimization Hints",. "version": "476",. "ruleset_format": "1.0.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\optimization-hints.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	53876
Entropy (8bit):	7.9764943672327115
Encrypted:	false
SSDEEP:	1536:/zehGBKxdYm83YG3iHb8fZANCdX4SjsxX9Ch:x0xW3YG3i78fZk67js3Ch
MD5:	73D4B58304AE9563053B998BBE47C6FB
SHA1:	36F26F00303A9950DC1AF3F06F394F993F457F7C
SHA-256:	07672AFB8C3FD28923BD01C69C757463DF4E99A9F042838A79093D4D6E92B6C6
SHA-512:	CAE2B38DD5608837E5AD091B17139E8B3A9D7534A3C01ACCE3B00FEFD7C9CB1E7D580F75DBA272698C75FAEC5F0F71D7D94544D65209BA217F7DD8997097251D
Malicious:	false
Preview:	............I.....g2.I..jI..n).+..)...h.+.A7p..q.:S4.Z...O.. R..\|....Da.e.?..W.-..ni2.....[.....6%8....x..y".b.Y7^.n......%/...f..c../.CY....j..\|].b..+.f..].{S.s..J...\|..nn..G..jb).Mn..../....R%.Fm.....K.....&.n.P.]..M.q:E..#^..O.....+...%\|{....5d..............=....X......._...OS1...+.q...7..vzf.....(....iVp....7..."QA.k`......Q...Y../X4..`...<+.@.U...m .'.X6...-.aD....<..w..7bv.e......<~.J.d...i..7..o}x_...B.T....V.et....u.{/.....p6.....t.Y(a.E......t.....P..45.a...!B-......B.RY#H....E....%...I..a.....$...T....7;...y..`.l.p..kv..`..q]...z.9rX...Rb..Q.N..../.>....p.ah.........z.\.Y}2W..o.?..-6=y...2[:..t7(t)....^.H...cl"]F."..@'h....t..s..Pf..SA.yCs....IuT..=.6...{...X....,...}.....ddE.2............YU..HQ..h.i.v...;..b....}.]K..../O.....]S~.l.H...........&....~m....3..l.l*RN"..k..1f.x.$..n...P-..](.Z./.........9...WJ\. /.B.Q....h.R...e.............Fg]...........?.Z..iH.Kyxc.e.P...H.....1N.Ac.;.4..he..b.V.w..'.....Z...K.4......p...2..9.s.."

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1865
Entropy (8bit):	6.002187808693378
Encrypted:	false
SSDEEP:	24:pZRj/flTULG22dVmdt2qNQMcRaoX96F1eK1BGpjBQghcoXZwjMx73w4vc:p/hUH2dAdtWPak6c5pSkawxLVvc
MD5:	F85CE0D2E1806C582954BD831378033E
SHA1:	584222C390C8E9D0B85574083B89BE48114B7F00
SHA-256:	E4FA2DED0327C43AA618CC751B8A8704CBEC33CDBC28E5FF49D536D58226E5BB
SHA-512:	08A9F6C42A774287A883A745ACF1A17327DF19493248C69D8497B6A5EE1A5E9310FB756A3C4C7665624929D4387BF365CAE5F6100AA873C04BFF2B56932BE4A8
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"rI34430Mqa-tj3CBWGaM65yBUrAgUFc_poiZa1PmmwZy_8S1PPjJcTKAXt-I10CHBN9n7hJfg4LFTlfcRv_dib5mbGIB-N9Mq7RkoFminZgi0tz4AdN192wkghWiKh0b8ZBciaG-vh8yu25g95jrBRml6PbDtD-1PgRqGw4NexUGWjguIW2gnGtRZ4FE-BEPNYI8cifzHEZAoyUs0jJHMJN8vavFR76ngAOpjvTNke8su9XpGHRDud

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\keys.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7057
Entropy (8bit):	5.979533556811076
Encrypted:	false
SSDEEP:	96:UXq6pG2GE+ryg+BQJ+m0plhYvPuW+wkpTm+ozdswsDm4+uTagSfC3AQj+y:uNtGbraBQgm4lOvMwkoR9PuGs3gy
MD5:	052B398CC49648660AAFF778D897C6DE
SHA1:	D4FDD81F2EE4C8A4572AFFBFD1830A0C574A8715
SHA-256:	47EC07DDF9BBD0082B3A2DFEA39491090E73A09106945982E395A9F3CB6D88AE
SHA-512:	ED53D0804A2EF1BC779AF76AA39F5EB8CE2EDC7F301F365EEAA0CF5A9AB49F2A21A24F52DD0EB07C480078CE2DD03C7FBB088082AEA9B7CDD88A6482AE072037
Malicious:	false
Preview:	{"https://issuer.captchafox.com":{"PrivateStateTokenV1VOPRF":{"batchsize":1,"id":1,"keys":{"0":{"Y":"AAAAAQQiyE+SESbq7GU5rTx6tZO4tBOxljp+Oya2mU28O+YoALIyXlLLqnl/h5h95ExYSsOlmMIb8EdsJBTrCaDl/KIZSskrfMbZpjhShG0jwnbXojEHI9WaAxKLkX/A/DkyMEg=","expiry":"1734807628115000"},"1":{"Y":"AAAAAQRNtld+5LLBquS4bEJKJwlLw61tzIyqTNkvMVnUTu+YiphbdGrRCjeDTN9D3p1Tgpfmq0N/OKMBYWzDMEN8Km9p9s49c6N2ph4B1MV1m7Ogdj969MOsTw54Kc849oqDl8s=","expiry":"1734807628115000"},"2":{"Y":"AAAAAQSBWW003A3ORFURCZrWNnbEIH15yzk184DaLSebbGzRdyCYtAM1qhhVmXZyBtWTzh6Bfkk5rLPyE1xdQilofPBizF/QJsdaMU0GYhPW1sOU4xoKbmgd/XrnOoFqA2ETOuc=","expiry":"1734807628115000"},"3":{"Y":"AAAAAQSG/ftGdm5B6iwAmVsHt6s43xx3nRf/Vpx9GdeEt3jSTM8hHvyLE9FAEkinGjt4Fp5EjnkCdE96Cxz10nZJRrMApIrGhG5kAoDu4T8PjJPiFQFyHAOdTG7OJWi2NS/rl1A=","expiry":"1734807628115000"},"4":{"Y":"AAAAAQT36tqe550UP5A+4Eokt8iuPZEuWQc9cGJXd7zUCZzrsqtGu3PMcVbOj5DjC4W+yoyF3HqKOqdtiBWgcMsZOcyln/6jUKqf5tS9AoIHa9CC3kQB8ISQd3lhR5j+qWVY8ms=","expiry":"1734807628115000"},"5":{"Y":"AAAAAQQMjaLNCR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8890592795725096
Encrypted:	false
SSDEEP:	3:SlGXdRABAHlgvAwUoXExn:SMXMGHaUoUx
MD5:	F06BBDC2FFF07678F17AB2E13E5242F2
SHA1:	38267922774478D53BBDF6C58F1AB621F76AD147
SHA-256:	04F1C19701E9F79342896D68856EB04023679DB2638B1038472B8F1AD790BCC6
SHA-512:	6223822E0AFD58EB7C25C5B207E377964C5E07779779E8DE5B2703B46526C4868DF217AF95F80E7692305ED98F8350ED20673659106116D95F1332C6A3EF540F
Malicious:	false
Preview:	1.fbd0d7206f8650d442eb772a03839aabc778b0225aee04589ca8cdad2aa99cca

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_676109890\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.418776852063957
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFIPgS1kVmHvY:F6VlMyPgS1kVaY
MD5:	077DA41A01DDE0173EBBF70D3B7210E2
SHA1:	4B3C3DEEB9522CA4EF4E42EFCF63B2674F6A5C07
SHA-256:	23BED5C8EBEA0C376483374BAD7BAF633A7E52F3E0A609371C518E06E645BDA0
SHA-512:	2822D02E2B3C6306E6D71FA62E7F472B4C3CDF0CBE499B70AC60A0A50E547ED47C394D7DE88BBEF2E6015920442B9D30CBC0D6869D154E02EC251712F918DEEC
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "trustToken",. "version": "2024.10.11.1".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1796
Entropy (8bit):	6.022829426746665
Encrypted:	false
SSDEEP:	48:p/hQRFG9I1RtpFNgS7akeFTfblt3zZ7NgAmklV:RWGSRtl7aPFfblNzZJ7mGV
MD5:	5B77D17F742E17839C63648C16624020
SHA1:	F086CADC1EFC9C6BCFC600B22C9DD43F3FA37B4A
SHA-256:	5FB6F49AB5D7ACD8B8E2364F228F3F1B2664CAA36D0FDA5DE48BF050CF0A097D
SHA-512:	EB21F509ECC70504C340BA3A23A16225DA54DB6298B851CDD2AE1F4731CA2197FF0DB08E12F8592E2BF8577F69AC7C8998C69B96487FDE0B41732E767EA3D2BE
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJjcl9lbi11c181MDAwMDBfaW5kZXguYmluIiwicm9vdF9oYXNoIjoiT2lRLV9wWnNraVM4VkRmaEpfUWtMREoxUFBIOUg1ZXhPbXBHcXAyanc3USJ9LHsicGF0aCI6Im1hbmlmZXN0Lmpzb24iLCJyb290X2hhc2giOiJ5emtmVW9qcmFST0NXLThFZW9zb2RHUlJmSTlqYWpCaDRtS3hGbXlMbndRIn1dLCJmb3JtYXQiOiJ0cmVlaGFzaCIsImhhc2hfYmxvY2tfc2l6ZSI6NDA5Nn1dLCJpdGVtX2lkIjoib2JlZGJiaGJwbW9qbmthbmljaW9nZ25tZWxtb29tb2MiLCJpdGVtX3ZlcnNpb24iOiIyMDI0MTEwNC42OTA4MTAwNjIuMTQiLCJwcm90b2NvbF92ZXJzaW9uIjoxfQ","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"jzb_MosCm_2qMIcsJ93mxQ6Aed67dxVLzMv6_pKvpvm-0gkF6e8F5GBvH-qPHhsb6TtKEMr7q-5N1at_kYqQufH3QujtcC_hgTMQu4klFTaHN-h26puephTfcfcU94I19ru3soM2JTDuW0mkkCd2NHcgezAl0BVpxh-689PZng8VPzaA_P1oVcflQhmc7sTl1Tj80VFX_wunmf0wZTn5iGiILiXhrHH7pi2unlzXx9_LkBLBwShsk9kqN_HJG8NhGIXhQ9yiG8e5A4sp3OG-M-pJkx7o_5FiOwGUXWE3F71DowReAAdWkhg0p9W

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\cr_en-us_500000_index.bin

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7959899
Entropy (8bit):	6.566332586225231
Encrypted:	false
SSDEEP:	196608:kAEt2h9aexbjMgzGkvfwyHqAwzikSMkDDYh7:kR2h9deCGiwyKrBSj3YJ
MD5:	1C7A4634CEF06AAA33C5F314F59B200F
SHA1:	536D968F23C42B5F892A4957303586B3965B2347
SHA-256:	826B6D494FBAAEDD9D52D45429D3B3B9F5F0EF068962F71F28C34CF94D47C146
SHA-512:	8B7698D945942167D1B562C95F77E462660AFA8018EB557C332E16BE6070CC97DCB12C7625C610921D511FE0CB9CAB40FE220EEC20FECD6D7C88599B588BCFAD
Malicious:	false
Preview:	......w.....aQ....hi1!..y%)2..f?x3..t.,<..r..J..ge.S..n..Z..c..a..e..v..s. }..dEy...l.:...b.....mI....p_....i.....u.....o.....z)r...v.O...k.....xG...jQ....4.;...1....q.....5.U...29....9.\|...3.....7."...6.^...8]....0......;....I..............w................&%.....M....... ......_..........$............g..../............... ............&.......... meaning^ ..-3..... to usd2.....Y...... meaning$.... .... ........................)-...... meaning............... meaning.>...S....@.....(9...... meaning.................... meaningh....u....#......eviri.x.... meaning.%..... ............ meaningl..... meaning....... ..... ........r eldonN..... meaning.d. . .... ...........Z.... meaning.8............ ... .....H..... meaning........ 14......... ......@....T....sad.ra bjarkard.ttir barney............... meaning8................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.926748386133333
Encrypted:	false
SSDEEP:	3:SFVnMfnEH/GXCpU4YtGGn:SFFMfGRgn
MD5:	5A9C7C68D410514A75DEF6B69386836F
SHA1:	3C8F19A198191257C47E79FAEC862141AF2CFC4A
SHA-256:	187D465315C5E127B19A43D1A4B45B6F61A53638E140205AC366DC3791A70522
SHA-512:	BC5A97BCDAF6CB6ABFF8BC4C103F87E4F5AC41493F5D74DA670E74412276CEAED708C9678A00D5A3C6F4E499389076591128A3EC4AE16267E779B4ECC8545AE0
Malicious:	false
Preview:	1.fe864c0d463d98b3666ceb3ffefdd9a3b9ab92fcc2230ffd1a42427795ca5c3d

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_819162381\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.832692341109591
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifF0AAGAR3CKG/w/VpKS11L4UvIgn:F6VlMT2C7Y/VUS11LBvIgn
MD5:	A21BEEF1F9D84A0738ED51B24D24A76C
SHA1:	B3FC285290405A96CDF1CFF5BBC8372C878E0F4B
SHA-256:	CB391F5288EB6913825BEF047A8B287464517C8F636A3061E262B1166C8B9F04
SHA-512:	79511B5001D83BC4833C94B5CEC5C04AD3A24B4095F35E4DB5098EC30DCBA51E813C9370C83F63556F28AD062365D0405C93891E782FFB5174C25952BEF41928
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "OnDeviceHeadSuggestENUS500000",. "version": "20241104.690810062.14".}

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7584
Entropy (8bit):	7.771402547890117
Encrypted:	false
SSDEEP:	192:kwSfH4IraPynWHFxRJkWLY6LiCD7LG7b2yqQwPOFb:kwSP4IEynWxJk6H2gLWqPQF
MD5:	17956A7275630ED70C693A72B11E67F3
SHA1:	AA600A8D3F3026816674F7DCA1D1FAE6651AEDD6
SHA-256:	96E34D83AD7BBB7ECF150EA8DAC6544F9AB2A6FC7BD40D8300CF6D4CD7679DD2
SHA-512:	CAA7428CA8C5ADAA405FE6E95F64992482A590B6452EE94040E0BF80E1F167000609D9795281EDA3CED0C9CD00D489F620A44E8FCC4E9C4963590D4E245384F2
Malicious:	false
Preview:	.PNG........IHDR.............\r.f....pHYs...........~....RIDATx..]K.e.U.U]v.u.i..J.d....Et#!.p.....I&.e..H.!..d.#ELq.Hd..0...b......x.1....E.....zos.......>.{.kI.U].[...^....3.....&>....................... ...@............................ ...@............................ ...@............................ ...@........c+..666..M~t.j..S.......>r5.7_.....W...;..#..`..M~...4..R.....lx...vC.w.Q..%.&.i...\|]..)...>....A.Y=.&...../.VJ.m>.[.(.d..+.8^..".6........2.W....=d.@..pl.!....c..Go>..oc.....).>..G&..W.....$....n.c....%....$...... .`.............@.@.[}..?.'..~........U#.j..?...@..L..@. .............-\|.#..ct...n.O?{K. .....r.....w~r<.]..x...........}...%.....\|...z..s....+.ic.R.5....2..e....~......4........@.........H..jV.T.`.}..}..o0Ki.._7$pw...........T......-...P8A../......y......._...=.?.._J.-.O..O...........~..H.........f..{.........Vb..........6S`..7..D$..@;~..2..@..g...o...U...d.......TR...........1.sf..[..../..!x2.....&h$.?[.....^....../..k.....M?.k

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7584
Entropy (8bit):	7.771402547890117
Encrypted:	false
SSDEEP:	192:kwSfH4IraPynWHFxRJkWLY6LiCD7LG7b2yqQwPOFb:kwSP4IEynWxJk6H2gLWqPQF
MD5:	17956A7275630ED70C693A72B11E67F3
SHA1:	AA600A8D3F3026816674F7DCA1D1FAE6651AEDD6
SHA-256:	96E34D83AD7BBB7ECF150EA8DAC6544F9AB2A6FC7BD40D8300CF6D4CD7679DD2
SHA-512:	CAA7428CA8C5ADAA405FE6E95F64992482A590B6452EE94040E0BF80E1F167000609D9795281EDA3CED0C9CD00D489F620A44E8FCC4E9C4963590D4E245384F2
Malicious:	false
URL:	https://winaero.com/blog/wp-content/uploads/2016/05/build-10158.png
Preview:	.PNG........IHDR.............\r.f....pHYs...........~....RIDATx..]K.e.U.U]v.u.i..J.d....Et#!.p.....I&.e..H.!..d.#ELq.Hd..0...b......x.1....E.....zos.......>.{.kI.U].[...^....3.....&>....................... ...@............................ ...@............................ ...@............................ ...@........c+..666..M~t.j..S.......>r5.7_.....W...;..#..`..M~...4..R.....lx...vC.w.Q..%.&.i...\|]..)...>....A.Y=.&...../.VJ.m>.[.(.d..+.8^..".6........2.W....=d.@..pl.!....c..Go>..oc.....).>..G&..W.....$....n.c....%....$...... .`.............@.@.[}..?.'..~........U#.j..?...@..L..@. .............-\|.#..ct...n.O?{K. .....r.....w~r<.]..x...........}...%.....\|...z..s....+.ic.R.5....2..e....~......4........@.........H..jV.T.`.}..}..o0Ki.._7$pw...........T......-...P8A../......y......._...=.?.._J.-.O..O...........~..H.........f..{.........Vb..........6S`..7..D$..@;~..2..@..g...o...U...d.......TR...........1.sf..[..../..!x2.....&h$.?[.....^....../..k.....M?.k

Static File Info

General

File type:	data
Entropy (8bit):	0.036718597854696076
TrID:	Aleph One Marathon Markup Language (5001/1) 100.00%
File name:	11sds_Invoice_9334749.html
File size:	318'464 bytes
MD5:	e2a8a5ab67e66241372b6e3152ac52d2
SHA1:	2ccc4c4fed431627229108c0178e8aaaf29648a9
SHA256:	5bf175a92bcc58478f661b504ecdd7c2011631a78e7e3231553f4984fd793e68
SHA512:	1f4cd51aa7819ead39e66e1d12ce0cb730ab0185a1ef08513aa511d4b6e44d5dc55bd38337f28f0269cf79ce51825472289f90d2d173f18e583ec77546966c1a
SSDEEP:	24:Fwbg79NOoMxikFvOmj/2VOZxvOmj/2VOkOX:8gxNOTxikFvOY/2VOZxvOY/2VOkO
TLSH:	9364686A63E68C20D93043B9449531CAF0A38C0FE3643CB671CC235E4BB965A488727E
File Content Preview:	<link rel="icon" href="https://winaero.com/blog/wp-content/uploads/2016/05/build-10158.png">....<meta property="og:image" content="https://winaero.com/blog/wp-content/uploads/2016/05/build-10158.png"> .. <title>RECEIPT580328018732JKSRA</title>....

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 16, 2024 16:43:54.151715040 CET	49674	443	192.168.2.5	23.1.237.91
Nov 16, 2024 16:43:54.151777983 CET	49675	443	192.168.2.5	23.1.237.91
Nov 16, 2024 16:43:54.261101961 CET	49673	443	192.168.2.5	23.1.237.91
Nov 16, 2024 16:44:01.720072031 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:01.720103025 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:01.720174074 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:01.720755100 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:01.720773935 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:02.780668974 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:02.780754089 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:02.780966043 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:02.781689882 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:02.781718016 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:02.801140070 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:02.801373005 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:02.801393986 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:02.802875042 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:02.802937031 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:02.839755058 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:02.839868069 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:02.840126991 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:02.840147972 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:02.920450926 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.040213108 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.040242910 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.040252924 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.040286064 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.040298939 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.040318966 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.040337086 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.040366888 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.040414095 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.043000937 CET	49707	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.043018103 CET	443	49707	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.177407980 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.177452087 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.177517891 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.177815914 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.177834988 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.616868019 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.617290020 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.617372990 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.618838072 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.618915081 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.619582891 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.619669914 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.751912117 CET	49675	443	192.168.2.5	23.1.237.91
Nov 16, 2024 16:44:03.751938105 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.751991034 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.850496054 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.850912094 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.850928068 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.854481936 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.854655981 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.854939938 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.855077982 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.855109930 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:03.859354973 CET	49674	443	192.168.2.5	23.1.237.91
Nov 16, 2024 16:44:03.921962976 CET	49673	443	192.168.2.5	23.1.237.91
Nov 16, 2024 16:44:03.921962976 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.921972036 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:03.921988964 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:04.022289038 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:04.022326946 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:04.022372007 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:04.022382975 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:04.022391081 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:04.022397995 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:04.022428036 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:04.022485018 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:04.022552967 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:04.023287058 CET	49712	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:04.023296118 CET	443	49712	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:05.587461948 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:05.587553024 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:05.587629080 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:05.587809086 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:05.587846994 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:05.621807098 CET	443	49703	23.1.237.91	192.168.2.5
Nov 16, 2024 16:44:05.621886015 CET	49703	443	192.168.2.5	23.1.237.91
Nov 16, 2024 16:44:06.535556078 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:06.536632061 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:06.536662102 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:06.538341999 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:06.538424015 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:06.539305925 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:06.539402008 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:06.580305099 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:06.580323935 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:06.626950026 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:06.805069923 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:06.805090904 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:06.805551052 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:06.806799889 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:06.806809902 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.672411919 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.672497988 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:07.680052042 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:07.680064917 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.680553913 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.720602036 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:07.740541935 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:07.783409119 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.984370947 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.984519005 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.984569073 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:07.984591961 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.984607935 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:07.984607935 CET	49717	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:07.984617949 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:07.984626055 CET	443	49717	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:08.026631117 CET	49718	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:08.026658058 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:08.026715040 CET	49718	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:08.026954889 CET	49718	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:08.026966095 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:08.871334076 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:08.871408939 CET	49718	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:08.872642040 CET	49718	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:08.872649908 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:08.873420954 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:08.874500036 CET	49718	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:08.915371895 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:09.116386890 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:09.116453886 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:09.116503954 CET	49718	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:09.117587090 CET	49718	443	192.168.2.5	184.28.90.27
Nov 16, 2024 16:44:09.117600918 CET	443	49718	184.28.90.27	192.168.2.5
Nov 16, 2024 16:44:14.079566956 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:14.079658031 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:14.079776049 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:14.080935001 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:14.080974102 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.044054985 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.044217110 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.045922041 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.045953035 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.046340942 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.095710039 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.619457960 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:15.619544983 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:15.619632959 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:15.620035887 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:15.620071888 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:15.729051113 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.771357059 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.978703022 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.978733063 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.978744984 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.978827953 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.978827953 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.978868008 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.978889942 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.978931904 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.978940964 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.979779959 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.979852915 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:15.979866982 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.979890108 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:15.979943991 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:16.365320921 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.366398096 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.366738081 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.366753101 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.367242098 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.374218941 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.415354013 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.604173899 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.604242086 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.604288101 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.604456902 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.604456902 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.604526997 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.604649067 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.620913029 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.620965004 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.621130943 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.621130943 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.621196985 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.621464014 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.626857996 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:16.626857996 CET	49720	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:16.626897097 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:16.626929998 CET	443	49720	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:16.631478071 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:16.631656885 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:16.631722927 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:16.675695896 CET	49716	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:44:16.675717115 CET	443	49716	142.250.186.164	192.168.2.5
Nov 16, 2024 16:44:16.721817017 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.721884966 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.721942902 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.721962929 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.722009897 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.722129107 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.738289118 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.738332987 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.738399982 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.738413095 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.738460064 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.738460064 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.740041971 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.740083933 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.740129948 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.740142107 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.740170002 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.740288019 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.839276075 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.839384079 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.839407921 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.839459896 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.839505911 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.839739084 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.839760065 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.839792013 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.839844942 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.839863062 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.839863062 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.839909077 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.839957952 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.840034962 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.855194092 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.855269909 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.855328083 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.855350971 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.855386972 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.855523109 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.856225014 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.856266975 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.856316090 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.856328964 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.856373072 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.856410980 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.857307911 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.857351065 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.857399940 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.857410908 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.857438087 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.857534885 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.858573914 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.858618021 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.858665943 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.858675957 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.858712912 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.858824015 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.859848022 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.859893084 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.859944105 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.859955072 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.859997034 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.860173941 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.957341909 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.957410097 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.957458973 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.957479000 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.957504034 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.957524061 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.957575083 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.957586050 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.957623005 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.957673073 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.957717896 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.957745075 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.957770109 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.957770109 CET	49726	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.957784891 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.957804918 CET	443	49726	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.997692108 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.997734070 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.997915030 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.999087095 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.999104023 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.999212027 CET	49731	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.999300957 CET	443	49731	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:16.999608994 CET	49731	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.999609947 CET	49731	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:16.999690056 CET	443	49731	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.000531912 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.000576019 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.000914097 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.002125978 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.002182007 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.002223015 CET	49734	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.002235889 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.002275944 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.002393961 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.002413034 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.002448082 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.002448082 CET	49734	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.002466917 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.002546072 CET	49734	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.002552986 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.937411070 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.938751936 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.938760996 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.941421032 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.941709995 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.941715956 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.942303896 CET	49734	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.942321062 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.942820072 CET	49734	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.942826033 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.944866896 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.944941044 CET	443	49731	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.945209026 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.945235014 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.945300102 CET	49731	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.945308924 CET	443	49731	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.945760012 CET	49731	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.945765972 CET	443	49731	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:17.945910931 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:17.945923090 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.077146053 CET	443	49731	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.077294111 CET	443	49731	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.077349901 CET	49731	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.077419043 CET	49731	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.077430010 CET	443	49731	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.078581095 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.078639030 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.078706026 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.078732967 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.078768969 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.078815937 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.079226017 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.079263926 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.079293013 CET	49733	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.079329967 CET	443	49733	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.079729080 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.079870939 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.079982996 CET	49734	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.081384897 CET	49736	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.081434011 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.081491947 CET	49736	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.081665993 CET	49734	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.081681013 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.081693888 CET	49734	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.081701040 CET	443	49734	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.083456993 CET	49736	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.083494902 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.085195065 CET	49737	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.085282087 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.085352898 CET	49737	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.085720062 CET	49737	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.085753918 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.087006092 CET	49738	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.087044001 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.087095022 CET	49738	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.087301016 CET	49738	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.087318897 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.125462055 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.125782967 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.125813961 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.127569914 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.127583027 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.168145895 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.168175936 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.168286085 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.168314934 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.168399096 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.168642998 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.168642998 CET	49730	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.168664932 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.168677092 CET	443	49730	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.173854113 CET	49739	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.173887014 CET	443	49739	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.178016901 CET	49739	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.178086996 CET	49739	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.178100109 CET	443	49739	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.294224024 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.294280052 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.294415951 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.294436932 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.294512033 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.294512033 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.294575930 CET	49732	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.294588089 CET	443	49732	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.296495914 CET	49740	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.296581984 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.296818972 CET	49740	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.296818972 CET	49740	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.296896935 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.967717886 CET	443	49739	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.968415976 CET	49739	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.968482018 CET	443	49739	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.968666077 CET	49739	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.968679905 CET	443	49739	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.969258070 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.969887018 CET	49736	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.969887972 CET	49736	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.969918966 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.969939947 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.981683016 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.981839895 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.982356071 CET	49738	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.982356071 CET	49738	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.982384920 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.982397079 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.982599020 CET	49737	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.982633114 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:18.982956886 CET	49737	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:18.982968092 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.031135082 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.031975985 CET	49740	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.031975985 CET	49740	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.032042027 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.032094955 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.097673893 CET	443	49739	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.097732067 CET	443	49739	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.097939014 CET	49739	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.097939014 CET	49739	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.098018885 CET	49739	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.098050117 CET	443	49739	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.099237919 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.100209951 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.100306988 CET	49736	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.100568056 CET	49741	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.100575924 CET	49736	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.100575924 CET	49736	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.100591898 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.100616932 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.100631952 CET	443	49736	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.100879908 CET	49741	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.100879908 CET	49741	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.100909948 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.102715015 CET	49742	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.102777958 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.102859974 CET	49742	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.102998018 CET	49742	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.103029013 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.160039902 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.160186052 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.160270929 CET	49740	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.160311937 CET	49740	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.160311937 CET	49740	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.160334110 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.160356045 CET	443	49740	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.161848068 CET	49743	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.161860943 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.161920071 CET	49743	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.162028074 CET	49743	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.162034035 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.569789886 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.569988012 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.570054054 CET	49738	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.570079088 CET	49738	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.570101023 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.570111990 CET	49738	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.570121050 CET	443	49738	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.571263075 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.571465015 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.571958065 CET	49737	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.572089911 CET	49737	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.572089911 CET	49737	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.572120905 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.572144032 CET	443	49737	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.572978973 CET	49744	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.573025942 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.573127031 CET	49744	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.573250055 CET	49744	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.573266983 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.574107885 CET	49745	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.574141026 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:19.574384928 CET	49745	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.574512005 CET	49745	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:19.574523926 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.081793070 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.082227945 CET	49742	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.082283974 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.082391024 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.082643986 CET	49742	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.082659006 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.082746029 CET	49741	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.082771063 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.083175898 CET	49741	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.083182096 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.087080002 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.087732077 CET	49743	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.087732077 CET	49743	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.087754011 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.087762117 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.214904070 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.215584040 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.215647936 CET	49742	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.215718031 CET	49742	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.215718031 CET	49742	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.215753078 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.215771914 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.215809107 CET	443	49742	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.215892076 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.215971947 CET	49741	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.216113091 CET	49741	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.216113091 CET	49741	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.216125011 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.216131926 CET	443	49741	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.218174934 CET	49746	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.218240976 CET	443	49746	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.218271971 CET	49747	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.218311071 CET	49746	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.218314886 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.218368053 CET	49747	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.218467951 CET	49746	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.218488932 CET	443	49746	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.218508959 CET	49747	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.218528986 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.220138073 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.220268011 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.220356941 CET	49743	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.220392942 CET	49743	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.220392942 CET	49743	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.220398903 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.220406055 CET	443	49743	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.222182035 CET	49748	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.222198963 CET	443	49748	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.222270966 CET	49748	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.222461939 CET	49748	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.222472906 CET	443	49748	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.326284885 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.326600075 CET	49745	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.326627970 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.326961994 CET	49745	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.326972008 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.357367039 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.357666969 CET	49744	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.357686043 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.357983112 CET	49744	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.357989073 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.456501007 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.456655979 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.456816912 CET	49745	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.456857920 CET	49745	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.456857920 CET	49745	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.456877947 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.456888914 CET	443	49745	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.459142923 CET	49749	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.459225893 CET	443	49749	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.459320068 CET	49749	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.459414005 CET	49749	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.459440947 CET	443	49749	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.498766899 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.498902082 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.498970032 CET	49744	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.499027967 CET	49744	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.499027967 CET	49744	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.499058008 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.499080896 CET	443	49744	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.501195908 CET	49750	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.501225948 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.501430988 CET	49750	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.501430988 CET	49750	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.501460075 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.938853979 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.939274073 CET	49747	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.939327955 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.939773083 CET	49747	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.939788103 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.949057102 CET	443	49746	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.949498892 CET	49746	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.949563026 CET	443	49746	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.949743032 CET	49746	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.949760914 CET	443	49746	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.965922117 CET	443	49748	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.966216087 CET	49748	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.966232061 CET	443	49748	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:20.966645956 CET	49748	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:20.966650009 CET	443	49748	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.070285082 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.070456982 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.070519924 CET	49747	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.070601940 CET	49747	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.070626974 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.070643902 CET	49747	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.070652962 CET	443	49747	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.073108912 CET	49751	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.073191881 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.073287964 CET	49751	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.073462009 CET	49751	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.073508024 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.079997063 CET	443	49746	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.080164909 CET	443	49746	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.080390930 CET	49746	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.080390930 CET	49746	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.080482006 CET	49746	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.080522060 CET	443	49746	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.082246065 CET	49752	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.082290888 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.082432985 CET	49752	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.082551003 CET	49752	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.082570076 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.094445944 CET	443	49748	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.094749928 CET	443	49748	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.094835997 CET	49748	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.094835997 CET	49748	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.094861031 CET	49748	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.094868898 CET	443	49748	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.097110033 CET	49753	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.097119093 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.097276926 CET	49753	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.097372055 CET	49753	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.097378969 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.193934917 CET	443	49749	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.194282055 CET	49749	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.194314957 CET	443	49749	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.194638968 CET	49749	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.194648981 CET	443	49749	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.219305038 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.219599962 CET	49750	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.219609976 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.219955921 CET	49750	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.219959974 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.326003075 CET	443	49749	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.326159000 CET	443	49749	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.326277971 CET	49749	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.326278925 CET	49749	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.326361895 CET	49749	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.326400995 CET	443	49749	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.327975035 CET	49754	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.328003883 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.328155994 CET	49754	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.328264952 CET	49754	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.328272104 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.813553095 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.813734055 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.813797951 CET	49750	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.813903093 CET	49750	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.813924074 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.813939095 CET	49750	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.813945055 CET	443	49750	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.816292048 CET	49755	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.816323996 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.816420078 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.816448927 CET	49755	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.816875935 CET	49755	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.816886902 CET	49752	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.816890955 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.816921949 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.817284107 CET	49752	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.817297935 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.821029902 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.821329117 CET	49751	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.821348906 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.821685076 CET	49751	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.821696043 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.839131117 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.839426994 CET	49753	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.839433908 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.839770079 CET	49753	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.839773893 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.945837975 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.946170092 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.946229935 CET	49752	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.946255922 CET	49752	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.946274042 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.946285009 CET	49752	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.946290970 CET	443	49752	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.948633909 CET	49756	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.948723078 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.948802948 CET	49756	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.948914051 CET	49756	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.948935032 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.951752901 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.951800108 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.951911926 CET	49751	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.951965094 CET	49751	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.952011108 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.952043056 CET	49751	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.952059031 CET	443	49751	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.953737974 CET	49757	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.953754902 CET	443	49757	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.953880072 CET	49757	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.953965902 CET	49757	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.953980923 CET	443	49757	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.968718052 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.968935966 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.968988895 CET	49753	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.969029903 CET	49753	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.969034910 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.969062090 CET	49753	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.969065905 CET	443	49753	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.970880032 CET	49758	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.970916986 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:21.970997095 CET	49758	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.971110106 CET	49758	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:21.971132994 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.077097893 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.077416897 CET	49754	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.077430964 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.077822924 CET	49754	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.077828884 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.210794926 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.210948944 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.211042881 CET	49754	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.211083889 CET	49754	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.211102009 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.211114883 CET	49754	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.211124897 CET	443	49754	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.213397026 CET	49759	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.213428974 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.213597059 CET	49759	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.213735104 CET	49759	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.213747978 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.559118032 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.559561014 CET	49755	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.559575081 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.559967995 CET	49755	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.559973001 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.959870100 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.960017920 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.960103989 CET	49755	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.960341930 CET	49755	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.960359097 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.960391045 CET	49755	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.960397005 CET	443	49755	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.961472034 CET	443	49757	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.962833881 CET	49760	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.962932110 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.963119030 CET	49760	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.963141918 CET	49757	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.963162899 CET	443	49757	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.963236094 CET	49760	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.963258028 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.963505030 CET	49757	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.963511944 CET	443	49757	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.964375019 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.964628935 CET	49756	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.964698076 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.964926958 CET	49756	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.964941025 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.966960907 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.967283010 CET	49758	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.967319965 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:22.967506886 CET	49758	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:22.967513084 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.095069885 CET	443	49757	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.095657110 CET	443	49757	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.095742941 CET	49757	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.095742941 CET	49757	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.095757961 CET	49757	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.095766068 CET	443	49757	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.096776009 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.096832991 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.096918106 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.097186089 CET	49759	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.097194910 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.097220898 CET	49756	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.097671986 CET	49756	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.097672939 CET	49759	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.097678900 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.097719908 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.097750902 CET	49756	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.097768068 CET	443	49756	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.098963976 CET	49761	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.099009037 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.099085093 CET	49761	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.099241018 CET	49761	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.099260092 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.099643946 CET	49762	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.099693060 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.099767923 CET	49762	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.099867105 CET	49762	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.099884033 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.100127935 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.100203037 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.100300074 CET	49758	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.100353956 CET	49758	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.100354910 CET	49758	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.100372076 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.100393057 CET	443	49758	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.102205992 CET	49763	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.102237940 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.102304935 CET	49763	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.102448940 CET	49763	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.102467060 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.225785971 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.225965977 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.226037979 CET	49759	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.226058960 CET	49759	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.226070881 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.226079941 CET	49759	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.226083994 CET	443	49759	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.228245974 CET	49764	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.228296041 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.228471994 CET	49764	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.228533030 CET	49764	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.228548050 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.710710049 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.711400986 CET	49760	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.711437941 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.711941004 CET	49760	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.711956978 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.815777063 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.816132069 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.816509008 CET	49761	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.816549063 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.816931963 CET	49761	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.816942930 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.817244053 CET	49762	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.817315102 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.817436934 CET	49762	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.817455053 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.841640949 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.841795921 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.841861963 CET	49760	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.841916084 CET	49760	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.841916084 CET	49760	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.841950893 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.841974020 CET	443	49760	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.844208956 CET	49765	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.844285011 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.844367027 CET	49765	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.844475031 CET	49765	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.844492912 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.846787930 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.847103119 CET	49763	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.847135067 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.847469091 CET	49763	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.847479105 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.942975998 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.943166018 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.943232059 CET	49761	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.943278074 CET	49761	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.943278074 CET	49761	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.943300962 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.943325996 CET	443	49761	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.943871021 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.944097996 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.944164991 CET	49762	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.944309950 CET	49762	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.944356918 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.944387913 CET	49762	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.944405079 CET	443	49762	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.946144104 CET	49766	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.946188927 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.946261883 CET	49766	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.946449041 CET	49766	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.946466923 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.946943998 CET	49767	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.947031021 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.947110891 CET	49767	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.947204113 CET	49767	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.947227955 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.963810921 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.964119911 CET	49764	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.964138985 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.964507103 CET	49764	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.964561939 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.977627993 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.977771997 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.977828026 CET	49763	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.977901936 CET	49763	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.977916002 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.977925062 CET	49763	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.977930069 CET	443	49763	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.979784012 CET	49768	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.979819059 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:23.979899883 CET	49768	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.980010986 CET	49768	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:23.980027914 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.092642069 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.092818975 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.092894077 CET	49764	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.092982054 CET	49764	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.093003988 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.093019009 CET	49764	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.093033075 CET	443	49764	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.094810963 CET	49769	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.094836950 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.094912052 CET	49769	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.095021963 CET	49769	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.095036030 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.577622890 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.578286886 CET	49765	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.578315020 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.578530073 CET	49765	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.578536034 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.674499035 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.674953938 CET	49766	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.674977064 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.675311089 CET	49766	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.675328016 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.681905031 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.682234049 CET	49767	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.682260036 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.682574987 CET	49767	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.682583094 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.706455946 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.706646919 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.706729889 CET	49765	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.706811905 CET	49765	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.706857920 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.706896067 CET	49765	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.706912994 CET	443	49765	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.709908962 CET	49770	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.710001945 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.710098982 CET	49770	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.710252047 CET	49770	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.710275888 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.714862108 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.715177059 CET	49768	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.715197086 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.715500116 CET	49768	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.715511084 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.811623096 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.811842918 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.811918974 CET	49767	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.812036037 CET	49767	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.812046051 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.812096119 CET	49767	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.812100887 CET	443	49767	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.814131021 CET	49771	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.814157009 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.814244986 CET	49771	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.814517021 CET	49771	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.814529896 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.842258930 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.842438936 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.842531919 CET	49768	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.842586040 CET	49768	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.842586040 CET	49768	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.842613935 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.842636108 CET	443	49768	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.844856977 CET	49772	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.844892979 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.845006943 CET	49772	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.845105886 CET	49772	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.845124006 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.902924061 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.902993917 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.903050900 CET	49766	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.903218985 CET	49766	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.903230906 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.903247118 CET	49766	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.903253078 CET	443	49766	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.906600952 CET	49773	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.906627893 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:24.906697989 CET	49773	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.906891108 CET	49773	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:24.906905890 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.048989058 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.049510956 CET	49769	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.049535036 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.049834013 CET	49769	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.049841881 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.211740017 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.211863041 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.211931944 CET	49769	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.212080956 CET	49769	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.212099075 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.212121964 CET	49769	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.212126970 CET	443	49769	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.215292931 CET	49774	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.215395927 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.215514898 CET	49774	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.215619087 CET	49774	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.215642929 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.567718029 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.568146944 CET	49772	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.568214893 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.568535089 CET	49772	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.568550110 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.572179079 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.572561979 CET	49770	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.572624922 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.573112965 CET	49770	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.573127031 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.586256981 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.586675882 CET	49771	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.586689949 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.587028027 CET	49771	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.587033033 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.638956070 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.639456987 CET	49773	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.639487982 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.639666080 CET	49773	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.639674902 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.697218895 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.697405100 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.697508097 CET	49772	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.697674036 CET	49772	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.697722912 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.697753906 CET	49772	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.697770119 CET	443	49772	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.700706959 CET	49775	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.700757980 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.701054096 CET	49775	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.701054096 CET	49775	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.701101065 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.705008984 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.705208063 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.705284119 CET	49770	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.705341101 CET	49770	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.705341101 CET	49770	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.705375910 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.705399036 CET	443	49770	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.707423925 CET	49776	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.707432032 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.707513094 CET	49776	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.707683086 CET	49776	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.707693100 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.722480059 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.722630024 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.722683907 CET	49771	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.722716093 CET	49771	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.722722054 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.722737074 CET	49771	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.722740889 CET	443	49771	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.724606037 CET	49777	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.724653006 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.724746943 CET	49777	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.724917889 CET	49777	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.724945068 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.767685890 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.767890930 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.767954111 CET	49773	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.767992973 CET	49773	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.768003941 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.768018007 CET	49773	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.768023968 CET	443	49773	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.770091057 CET	49778	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.770098925 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:25.770174026 CET	49778	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.770315886 CET	49778	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:25.770325899 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.487721920 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.488658905 CET	49774	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.488723993 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.489084005 CET	49774	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.489100933 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.495501995 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.495871067 CET	49777	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.495891094 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.496085882 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.496402025 CET	49777	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.496413946 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.496668100 CET	49776	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.496676922 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.497153044 CET	49776	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.497158051 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.498347044 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.498689890 CET	49775	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.498722076 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.499188900 CET	49775	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.499196053 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.500998020 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.501279116 CET	49778	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.501286030 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.501756907 CET	49778	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.501760960 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.617672920 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.617846012 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.618041039 CET	49774	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.618180990 CET	49774	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.618230104 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.618263006 CET	49774	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.618278980 CET	443	49774	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.621438980 CET	49779	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.621531963 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.621644974 CET	49779	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.621856928 CET	49779	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.621880054 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.625600100 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.626013994 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.626082897 CET	49777	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.626118898 CET	49777	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.626135111 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.626157999 CET	49777	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.626168013 CET	443	49777	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.628509045 CET	49780	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.628524065 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.628607035 CET	49780	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.628777981 CET	49780	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.628777027 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.628806114 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.628917933 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.628973961 CET	49776	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.629050016 CET	49776	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.629054070 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.629065990 CET	49776	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.629069090 CET	443	49776	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.631284952 CET	49781	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.631306887 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.631414890 CET	49781	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.631599903 CET	49781	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.631624937 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.631694078 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.631789923 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.631849051 CET	49778	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.631944895 CET	49778	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.631948948 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.631958961 CET	49778	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.631963015 CET	443	49778	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.632424116 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.633295059 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.633373022 CET	49775	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.633402109 CET	49775	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.633402109 CET	49775	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.633418083 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.633430004 CET	443	49775	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.634421110 CET	49782	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.634434938 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.634526968 CET	49782	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.634609938 CET	49782	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.634618998 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.635126114 CET	49783	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.635147095 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:26.635222912 CET	49783	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.635382891 CET	49783	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:26.635407925 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.536147118 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.536684990 CET	49780	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.536696911 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.537108898 CET	49780	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.537113905 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.538490057 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.538772106 CET	49782	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.538779974 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.539055109 CET	49782	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.539060116 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.539275885 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.539482117 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.539542913 CET	49781	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.539561033 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.539827108 CET	49783	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.539827108 CET	49781	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.539845943 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.539877892 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.540142059 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.540441036 CET	49779	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.540503979 CET	49783	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.540513992 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.540525913 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.540756941 CET	49779	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.540771961 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.666228056 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.666306973 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.666369915 CET	49780	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.666574955 CET	49780	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.666589022 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.666603088 CET	49780	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.666609049 CET	443	49780	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.669569016 CET	49784	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.669611931 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.669693947 CET	49784	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.669879913 CET	49784	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.669894934 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.672095060 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.672527075 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.672653913 CET	49781	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.672698975 CET	49781	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.672699928 CET	49781	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.672719955 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.672739983 CET	443	49781	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.674374104 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.674525976 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.674602985 CET	49783	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.674664974 CET	49783	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.674664974 CET	49783	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.674679995 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.674700022 CET	443	49783	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.675003052 CET	49785	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.675043106 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.675139904 CET	49785	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.675220013 CET	49785	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.675235987 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.676894903 CET	49786	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.676915884 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.676990986 CET	49786	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.677150011 CET	49786	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.677162886 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.680531979 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.680659056 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.680721045 CET	49782	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.680792093 CET	49782	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.680802107 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.680816889 CET	49782	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.680823088 CET	443	49782	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.683450937 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.683485031 CET	443	49787	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.683572054 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.683717012 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.683746099 CET	443	49787	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.817790031 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.817941904 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.818032980 CET	49779	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.818185091 CET	49779	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.818185091 CET	49779	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.818232059 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.818260908 CET	443	49779	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.820353985 CET	49788	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.820444107 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:27.820559978 CET	49788	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.820730925 CET	49788	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:27.820765972 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.549264908 CET	443	49787	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.550026894 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.550046921 CET	443	49787	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.550713062 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.550729990 CET	443	49787	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.553464890 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.553888083 CET	49785	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.553901911 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.554471970 CET	49785	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.554486990 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.562479973 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.562999010 CET	49786	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.563009977 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.563327074 CET	49786	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.563333035 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.577719927 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.578222990 CET	49788	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.578243971 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.578759909 CET	49788	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.578771114 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.687725067 CET	443	49787	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.688180923 CET	443	49787	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.688365936 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.688365936 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.688365936 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.691060066 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.691246033 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.691328049 CET	49785	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.691329956 CET	49789	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.691343069 CET	443	49789	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.691363096 CET	49785	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.691385984 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.691409111 CET	49785	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.691422939 CET	443	49785	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.691426039 CET	49789	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.691612959 CET	49789	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.691626072 CET	443	49789	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.693520069 CET	49790	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.693550110 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.693646908 CET	49790	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.693815947 CET	49790	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.693834066 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.698575020 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.699105978 CET	49784	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.699115038 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.699525118 CET	49784	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.699531078 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.707545042 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.707757950 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.707833052 CET	49788	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.707894087 CET	49788	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.707894087 CET	49788	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.707922935 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.707947969 CET	443	49788	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.709841013 CET	49791	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.709855080 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.709935904 CET	49791	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.710107088 CET	49791	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.710119009 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.731076956 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.731220961 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.731406927 CET	49786	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.731501102 CET	49786	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.731509924 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.731523037 CET	49786	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.731528044 CET	443	49786	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.733800888 CET	49792	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.733824968 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.733912945 CET	49792	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.734076023 CET	49792	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.734091043 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.881684065 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.881752014 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.881866932 CET	49784	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.882013083 CET	49784	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.882035017 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.882049084 CET	49784	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.882055998 CET	443	49784	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.884279013 CET	49793	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.884373903 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:28.884469986 CET	49793	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.884669065 CET	49793	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:28.884705067 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.001848936 CET	49787	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.001883030 CET	443	49787	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.433439016 CET	443	49789	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.434195042 CET	49789	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.434215069 CET	443	49789	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.434603930 CET	49789	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.434609890 CET	443	49789	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.439372063 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.439810038 CET	49790	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.439825058 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.440140009 CET	49790	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.440148115 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.442032099 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.442433119 CET	49791	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.442441940 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.442713022 CET	49791	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.442718029 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.469324112 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.469952106 CET	49792	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.469994068 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.470372915 CET	49792	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.470386982 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.565567017 CET	443	49789	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.565634966 CET	443	49789	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.565917969 CET	49789	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.565917969 CET	49789	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.566926956 CET	49789	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.566936016 CET	443	49789	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.568511009 CET	49794	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.568595886 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.568696022 CET	49794	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.568788052 CET	49794	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.568808079 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.570843935 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.570977926 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.571055889 CET	49790	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.571105957 CET	49790	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.571105957 CET	49790	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.571127892 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.571150064 CET	443	49790	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.573277950 CET	49795	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.573307991 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.573399067 CET	49795	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.573587894 CET	49795	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.573611021 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.573669910 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.573823929 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.573884964 CET	49791	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.573916912 CET	49791	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.573924065 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.573947906 CET	49791	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.573954105 CET	443	49791	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.575773001 CET	49796	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.575826883 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.575923920 CET	49796	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.576077938 CET	49796	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.576107025 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.598433971 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.598670006 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.598838091 CET	49792	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.598997116 CET	49792	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.598997116 CET	49792	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.599041939 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.599070072 CET	443	49792	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.600856066 CET	49797	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.600872040 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.600963116 CET	49797	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.601125002 CET	49797	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.601130962 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.611020088 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.611491919 CET	49793	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.611550093 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.612001896 CET	49793	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.612015963 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.740550041 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.740626097 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.740971088 CET	49793	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.741063118 CET	49793	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.741063118 CET	49793	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.741108894 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.741137028 CET	443	49793	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.743747950 CET	49798	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.743814945 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:29.743978024 CET	49798	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.744203091 CET	49798	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:29.744231939 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.471976995 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.472554922 CET	49794	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.472570896 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.472980976 CET	49794	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.472990990 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.474447012 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.474739075 CET	49796	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.474761009 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.475018978 CET	49796	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.475029945 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.476017952 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.476278067 CET	49797	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.476295948 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.476547956 CET	49797	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.476553917 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.476823092 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.477071047 CET	49795	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.477101088 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.477328062 CET	49795	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.477334976 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.486078978 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.486507893 CET	49798	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.486538887 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.486785889 CET	49798	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.486793995 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.602880955 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.603157043 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.603224993 CET	49794	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.603255987 CET	49794	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.603271961 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.603285074 CET	49794	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.603291988 CET	443	49794	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.604126930 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.604264975 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.604332924 CET	49797	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.604356050 CET	49797	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.604365110 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.604377985 CET	49797	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.604383945 CET	443	49797	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.606249094 CET	49799	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.606273890 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.606375933 CET	49799	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.606491089 CET	49799	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.606494904 CET	49800	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.606498957 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.606508970 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.606576920 CET	49800	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.606748104 CET	49800	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.606765985 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.612353086 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.612639904 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.612704039 CET	49796	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.612736940 CET	49796	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.612750053 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.612809896 CET	49796	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.612823009 CET	443	49796	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.614707947 CET	49801	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.614729881 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.614828110 CET	49801	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.614985943 CET	49801	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.615009069 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.617147923 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.617196083 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.617252111 CET	49798	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.617363930 CET	49798	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.617376089 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.617419958 CET	49798	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.617430925 CET	443	49798	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.619189978 CET	49802	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.619196892 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.619271040 CET	49802	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.619436979 CET	49802	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.619446039 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.654807091 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.654944897 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.655025005 CET	49795	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.655098915 CET	49795	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.655142069 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.655173063 CET	49795	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.655189991 CET	443	49795	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.656851053 CET	49803	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.656898022 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:30.656996012 CET	49803	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.657083988 CET	49803	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:30.657105923 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.464792967 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.465451002 CET	49799	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.465475082 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.466180086 CET	49799	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.466191053 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.468108892 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.468277931 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.468285084 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.468449116 CET	49801	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.468466043 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.468801022 CET	49801	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.468811989 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.468977928 CET	49803	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.468980074 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.468991995 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.469268084 CET	49802	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.469274998 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.469312906 CET	49803	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.469322920 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.469513893 CET	49800	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.469527006 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.470000029 CET	49802	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.470004082 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.470074892 CET	49800	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.470079899 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.594039917 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.594108105 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.594166040 CET	49799	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.594285965 CET	49799	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.594301939 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.594316959 CET	49799	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.594324112 CET	443	49799	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.596628904 CET	49804	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.596637964 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.596704006 CET	49804	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.596803904 CET	49804	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.596808910 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.597503901 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.597743034 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.597798109 CET	49803	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.597857952 CET	49803	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.597857952 CET	49803	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.597876072 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.597897053 CET	443	49803	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.599703074 CET	49805	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.599735975 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.599821091 CET	49805	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.599932909 CET	49805	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.599958897 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.601298094 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.601491928 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.601546049 CET	49800	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.601564884 CET	49800	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.601567984 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.601577044 CET	49800	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.601581097 CET	443	49800	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.603199959 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.603207111 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.603277922 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.603382111 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.603389025 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.767679930 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.767823935 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.767878056 CET	49802	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.767884016 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.768053055 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.768064022 CET	49802	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.768083096 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.768094063 CET	49802	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.768099070 CET	443	49802	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.768122911 CET	49801	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.768208027 CET	49801	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.768208027 CET	49801	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.768254995 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.768280983 CET	443	49801	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.770940065 CET	49807	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.771003008 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.771029949 CET	443	49808	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.771038055 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.771100998 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.771150112 CET	49807	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.771266937 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.771275043 CET	49807	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:31.771275997 CET	443	49808	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:31.771295071 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.325592995 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.326335907 CET	49805	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.326384068 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.326725960 CET	49805	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.326738119 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.339106083 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.339479923 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.339490891 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.339819908 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.339827061 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.454806089 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.454957008 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.455141068 CET	49805	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.455291986 CET	49805	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.455358028 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.455398083 CET	49805	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.455415010 CET	443	49805	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.457884073 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.457916021 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.457995892 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.458168983 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.458184004 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.470823050 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.470876932 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.470999956 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.471019983 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.471060991 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.471263885 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.471272945 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.471286058 CET	49806	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.471291065 CET	443	49806	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.473162889 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.473210096 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.473293066 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.473401070 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.473413944 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.505209923 CET	443	49808	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.505693913 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.505707979 CET	443	49808	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.506124973 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.506131887 CET	443	49808	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.511301041 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.511547089 CET	49807	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.511574030 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.511822939 CET	49807	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.511835098 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.567070961 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.567811966 CET	49804	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.567831993 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.568136930 CET	49804	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.568141937 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.638549089 CET	443	49808	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.638953924 CET	443	49808	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.639255047 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.639255047 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.639255047 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.640381098 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.640564919 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.640669107 CET	49807	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.640786886 CET	49807	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.640819073 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.640845060 CET	49807	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.640860081 CET	443	49807	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.640976906 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.641011953 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.641081095 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.641163111 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.641170979 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.642524004 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.642570019 CET	443	49812	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.642646074 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.642749071 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.642765999 CET	443	49812	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.755717039 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.755872965 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.755955935 CET	49804	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.756052971 CET	49804	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.756067038 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.756104946 CET	49804	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.756109953 CET	443	49804	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.757930040 CET	49813	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.757949114 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.759922981 CET	49813	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.760023117 CET	49813	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.760040998 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:32.939542055 CET	49808	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:32.939579964 CET	443	49808	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.191441059 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.192320108 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.192337036 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.193056107 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.193062067 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.209383011 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.209757090 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.209789038 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.210103989 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.210112095 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.321846962 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.321861982 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.321912050 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.321914911 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.321960926 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.322120905 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.322138071 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.322145939 CET	49809	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.322150946 CET	443	49809	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.324414968 CET	49814	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.324510098 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.324603081 CET	49814	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.324707985 CET	49814	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.324729919 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.339179039 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.339240074 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.339319944 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.339358091 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.339428902 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.339499950 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.339538097 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.339590073 CET	49810	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.339606047 CET	443	49810	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.341214895 CET	49815	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.341238976 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.341312885 CET	49815	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.341430902 CET	49815	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.341442108 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.389976025 CET	443	49812	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.390552044 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.390605927 CET	443	49812	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.390921116 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.390935898 CET	443	49812	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.393455029 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.393696070 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.393707991 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.393986940 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.393990993 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.507086039 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.507528067 CET	49813	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.507541895 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.508074045 CET	49813	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.508078098 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.517779112 CET	443	49812	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.517921925 CET	443	49812	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.518107891 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.518107891 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.518109083 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.520490885 CET	49816	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.520546913 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.520616055 CET	49816	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.520760059 CET	49816	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.520777941 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.526163101 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.526182890 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.526233912 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.526243925 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.526381969 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.526401043 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.526408911 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.526561022 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.526596069 CET	443	49811	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.526643991 CET	49811	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.528266907 CET	49817	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.528306961 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.528382063 CET	49817	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.528508902 CET	49817	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.528525114 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.802582026 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.802675962 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.802737951 CET	49813	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.803663969 CET	49813	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.803683043 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.803693056 CET	49813	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.803698063 CET	443	49813	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.806015015 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.806122065 CET	443	49818	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.806216955 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.806314945 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.806334972 CET	443	49818	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:33.830005884 CET	49812	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:33.830077887 CET	443	49812	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.309736967 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.310180902 CET	49814	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.310231924 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.310657978 CET	49814	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.310671091 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.314904928 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.315267086 CET	49815	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.315278053 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.315639019 CET	49815	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.315644026 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.435424089 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.435770988 CET	49817	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.435782909 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.436139107 CET	49817	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.436142921 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.441901922 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.442070007 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.442132950 CET	49815	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.442208052 CET	49815	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.442224026 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.442234039 CET	49815	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.442240000 CET	443	49815	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.443712950 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.444137096 CET	49816	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.444200039 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.444554090 CET	49816	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.444566965 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.445235968 CET	49819	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.445261002 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.445331097 CET	49819	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.445497990 CET	49819	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.445509911 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.446501970 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.446599960 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.446671009 CET	49814	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.446778059 CET	49814	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.446813107 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.446846008 CET	49814	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.446861029 CET	443	49814	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.448982000 CET	49820	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.449026108 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.449094057 CET	49820	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.449212074 CET	49820	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.449219942 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.564244032 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.564308882 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.564379930 CET	49817	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.564687967 CET	49817	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.564701080 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.564711094 CET	49817	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.564714909 CET	443	49817	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.566962957 CET	49821	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.566987038 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.567051888 CET	49821	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.567275047 CET	49821	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.567285061 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.578038931 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.578182936 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.578253031 CET	49816	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.578303099 CET	49816	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.578303099 CET	49816	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.578334093 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.578372955 CET	443	49816	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.580080986 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.580108881 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.580174923 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.580282927 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.580291986 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.848994970 CET	443	49818	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.849602938 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.849673033 CET	443	49818	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:34.850007057 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:34.850022078 CET	443	49818	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:35.997435093 CET	443	49818	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:35.997600079 CET	443	49818	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:35.997872114 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:35.997873068 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:35.997873068 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.000255108 CET	49823	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.000334024 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.000431061 CET	49823	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.000565052 CET	49823	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.000586033 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.128621101 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.129375935 CET	49821	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.129456997 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.130033970 CET	49821	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.130060911 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.136739016 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.137073040 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.137109995 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.137561083 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.137567043 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.137969017 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.138261080 CET	49819	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.138292074 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.138711929 CET	49819	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.138725996 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.143662930 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.143966913 CET	49820	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.144002914 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.144424915 CET	49820	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.144432068 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.259954929 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.260003090 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.260112047 CET	49821	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.260416985 CET	49821	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.260452032 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.260485888 CET	49821	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.260500908 CET	443	49821	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.264369965 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.264421940 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.264523983 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.264729977 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.264750957 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.269742966 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.269809008 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.269870996 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.269891977 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.269916058 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.269987106 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.270081997 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.270097017 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.270113945 CET	49822	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.270123005 CET	443	49822	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.271410942 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.271584034 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.271646976 CET	49819	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.271709919 CET	49819	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.271723986 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.271739006 CET	49819	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.271744967 CET	443	49819	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.272239923 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.272341013 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.272412062 CET	49820	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.274838924 CET	49825	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.274869919 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.274945974 CET	49825	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.275167942 CET	49825	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.275186062 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.275242090 CET	49820	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.275249004 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.275263071 CET	49820	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.275268078 CET	443	49820	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.278024912 CET	49826	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.278043985 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.278120995 CET	49826	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.278553963 CET	49826	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.278573036 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.279653072 CET	49827	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.279670954 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.279745102 CET	49827	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.279906988 CET	49827	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.279926062 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.298866987 CET	49818	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.298933029 CET	443	49818	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.746591091 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.747124910 CET	49823	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.747155905 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.747579098 CET	49823	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.747585058 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.877202988 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.877370119 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.877449036 CET	49823	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.877547026 CET	49823	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.877568007 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.877578974 CET	49823	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.877583981 CET	443	49823	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.880867958 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.880965948 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.881076097 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.881309032 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.881344080 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.995469093 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.996217012 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.996248007 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:36.996654987 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:36.996660948 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.027534008 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.028227091 CET	49826	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.028249979 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.028753042 CET	49826	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.028764963 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.034440041 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.034923077 CET	49827	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.034934044 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.035473108 CET	49827	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.035479069 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.065860987 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.066529989 CET	49825	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.066550970 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.067342043 CET	49825	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.067348003 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.125875950 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.125947952 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.125988960 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.126029968 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.126105070 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.126266956 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.126315117 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.126346111 CET	49824	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.126362085 CET	443	49824	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.130445004 CET	49829	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.130464077 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.130537033 CET	49829	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.130769014 CET	49829	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.130775928 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.157413006 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.157569885 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.157645941 CET	49826	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.157747984 CET	49826	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.157756090 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.157768011 CET	49826	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.157773972 CET	443	49826	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.161879063 CET	49830	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.161904097 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.161990881 CET	49830	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.162189007 CET	49830	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.162204027 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.163114071 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.163304090 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.163371086 CET	49827	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.163419962 CET	49827	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.163435936 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.163448095 CET	49827	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.163454056 CET	443	49827	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.166387081 CET	49831	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.166405916 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.166476965 CET	49831	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.166663885 CET	49831	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.166676998 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.201232910 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.201323032 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.201383114 CET	49825	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.201728106 CET	49825	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.201740026 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.201751947 CET	49825	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.201757908 CET	443	49825	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.205908060 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.206017017 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.206114054 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.206434965 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.206470013 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.627650023 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.628509045 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.628563881 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.629295111 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.629313946 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.757971048 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.758030891 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.758121967 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.758136034 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.758207083 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.758436918 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.758482933 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.758513927 CET	49828	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.758529902 CET	443	49828	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.762557030 CET	49833	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.762578964 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.762686014 CET	49833	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.762898922 CET	49833	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.762912989 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.858230114 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.858972073 CET	49829	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.858984947 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.859669924 CET	49829	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.859674931 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.905678034 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.906310081 CET	49831	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.906326056 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.906922102 CET	49831	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.906925917 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.908873081 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.909307957 CET	49830	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.909327984 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.909838915 CET	49830	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.909846067 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.927458048 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.927874088 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.927958965 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.928508043 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.928564072 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.989701986 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.989845991 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.989906073 CET	49829	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.990106106 CET	49829	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.990114927 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.990140915 CET	49829	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.990144968 CET	443	49829	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.994152069 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.994246960 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:37.994374990 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.994585037 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:37.994623899 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.035263062 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.035456896 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.035517931 CET	49831	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.035566092 CET	49831	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.035571098 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.035597086 CET	49831	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.035600901 CET	443	49831	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.036981106 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.037156105 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.037235975 CET	49830	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.037295103 CET	49830	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.037326097 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.037350893 CET	49830	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.037364960 CET	443	49830	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.038712978 CET	49835	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.038723946 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.038786888 CET	49835	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.038975000 CET	49835	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.038985968 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.039814949 CET	49836	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.039859056 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.039927959 CET	49836	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.040080070 CET	49836	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.040096045 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.055012941 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.055041075 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.055085897 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.055109978 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.055175066 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.055381060 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.055382013 CET	49832	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.055423975 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.055449963 CET	443	49832	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.058425903 CET	49837	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.058450937 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.058540106 CET	49837	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.058744907 CET	49837	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.058769941 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.506721973 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.507373095 CET	49833	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.507436991 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.507942915 CET	49833	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.507958889 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.637868881 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.638034105 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.638238907 CET	49833	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.638330936 CET	49833	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.638330936 CET	49833	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.638376951 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.638406038 CET	443	49833	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.641613960 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.641650915 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.641741991 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.641941071 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.641951084 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.724088907 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.724653959 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.724721909 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.725231886 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.725246906 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.766000986 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.766482115 CET	49835	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.766511917 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.766985893 CET	49835	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.766999960 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.773735046 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.774063110 CET	49836	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.774084091 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.774518013 CET	49836	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.774522066 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.787658930 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.787957907 CET	49837	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.787976027 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.788404942 CET	49837	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.788409948 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.854827881 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.854852915 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.854892969 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.855051041 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.855051041 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.855207920 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.855254889 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.855288982 CET	49834	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.855305910 CET	443	49834	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.858367920 CET	49839	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.858400106 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.858498096 CET	49839	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.858663082 CET	49839	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.858679056 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.906399012 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.906461000 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.906662941 CET	49835	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.906724930 CET	49835	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.906724930 CET	49835	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.906759024 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.906785965 CET	443	49835	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.907062054 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.907211065 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.908235073 CET	49836	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.910748005 CET	49840	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.910784960 CET	49836	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.910797119 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.910797119 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.910808086 CET	49836	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.910813093 CET	443	49836	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.910890102 CET	49840	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.911906958 CET	49840	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.911936998 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.913203001 CET	49841	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.913249016 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.913352966 CET	49841	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.913506031 CET	49841	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.913532972 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.917077065 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.917203903 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.917283058 CET	49837	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.917336941 CET	49837	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.917336941 CET	49837	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.917356014 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.917376995 CET	443	49837	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.919722080 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.919749975 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:38.919836998 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.920011997 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:38.920052052 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.392133951 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.392842054 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.392863035 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.393678904 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.393685102 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.523077011 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.523103952 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.523152113 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.523210049 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.523236990 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.523503065 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.523523092 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.523534060 CET	49838	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.523540974 CET	443	49838	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.526387930 CET	49843	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.526468992 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.526581049 CET	49843	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.526760101 CET	49843	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.526796103 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.603487015 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.604074001 CET	49839	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.604110003 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.604352951 CET	49839	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.604362011 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.649741888 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.650249004 CET	49841	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.650279999 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.650633097 CET	49841	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.650643110 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.665395021 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.665705919 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.665736914 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.666006088 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.666022062 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.737139940 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.737205982 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.737281084 CET	49839	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.737472057 CET	49839	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.737518072 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.737546921 CET	49839	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.737564087 CET	443	49839	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.740894079 CET	49844	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.740936041 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.741044998 CET	49844	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.741189003 CET	49844	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.741220951 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.781511068 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.781812906 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.781917095 CET	49841	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.781991005 CET	49841	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.781991005 CET	49841	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.782027960 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.782053947 CET	443	49841	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.784316063 CET	49845	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.784353018 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.784427881 CET	49845	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.784590006 CET	49845	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.784605026 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.797545910 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.797566891 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.797604084 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.797626972 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.797668934 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.797862053 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.797898054 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.797924042 CET	49842	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.797940969 CET	443	49842	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.800195932 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.800209999 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:39.800290108 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.800434113 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:39.800446033 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.273247004 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.273886919 CET	49843	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.273924112 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.274384975 CET	49843	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.274394035 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.402935028 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.403007984 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.403106928 CET	49843	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.403429031 CET	49843	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.403429031 CET	49843	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.403476000 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.403505087 CET	443	49843	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.406225920 CET	49847	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.406270027 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.406351089 CET	49847	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.406455994 CET	49847	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.406464100 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.481676102 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.482057095 CET	49844	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.482105970 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.482433081 CET	49844	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.482448101 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.518271923 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.518593073 CET	49845	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.518610001 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.519007921 CET	49845	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.519013882 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.571161985 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.571468115 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.571480989 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.571906090 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.571912050 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.588084936 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.588362932 CET	49840	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.588382959 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.588706017 CET	49840	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.588712931 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.613044024 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.613116026 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.613188028 CET	49844	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.613281965 CET	49844	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.613317013 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.613343954 CET	49844	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.613358021 CET	443	49844	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.615443945 CET	49848	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.615484953 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.615565062 CET	49848	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.615672112 CET	49848	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.615686893 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.653866053 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.653964996 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.654022932 CET	49845	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.654103994 CET	49845	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.654119968 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.654134035 CET	49845	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.654140949 CET	443	49845	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.655945063 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.655981064 CET	443	49849	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.656035900 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.656155109 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.656166077 CET	443	49849	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.707500935 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.707520962 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.707561970 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.707592010 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.707643986 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.707833052 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.707854033 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.707931995 CET	49846	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.707945108 CET	443	49846	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.710252047 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.710288048 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.710375071 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.710501909 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.710516930 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.720175982 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.720231056 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.720277071 CET	49840	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.720400095 CET	49840	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.720407963 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.720438957 CET	49840	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.720443964 CET	443	49840	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.722119093 CET	49851	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.722160101 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:40.722232103 CET	49851	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.722342968 CET	49851	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:40.722357988 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.155395985 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.155814886 CET	49847	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.155838966 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.156208038 CET	49847	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.156215906 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.286876917 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.286941051 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.287137032 CET	49847	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.287173986 CET	49847	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.287173986 CET	49847	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.287192106 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.287203074 CET	443	49847	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.289510012 CET	49852	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.289546967 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.289628983 CET	49852	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.289762974 CET	49852	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.289773941 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.388902903 CET	443	49849	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.392821074 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.392910004 CET	443	49849	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.393142939 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.393157005 CET	443	49849	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.446975946 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.447473049 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.447498083 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.447720051 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.447727919 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.523840904 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.524408102 CET	49848	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.524422884 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.524750948 CET	49848	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.524755001 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.549952030 CET	443	49849	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.551060915 CET	443	49849	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.551259041 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.551259995 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.551259995 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.553699017 CET	49853	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.553786039 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.553889036 CET	49853	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.554013014 CET	49853	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.554034948 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.578634977 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.578856945 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.578903913 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.579098940 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.579098940 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.579098940 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.580909967 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.580940962 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.581007957 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.581135035 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.581151962 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.677165985 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.677237034 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.677370071 CET	49848	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.677402020 CET	49848	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.677417994 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.677428007 CET	49848	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.677432060 CET	443	49848	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.679358959 CET	49855	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.679409027 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.679495096 CET	49855	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.679599047 CET	49855	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.679614067 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.861572027 CET	49849	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.861651897 CET	443	49849	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:41.892606020 CET	49850	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:41.892622948 CET	443	49850	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.039213896 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.039679050 CET	49852	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.039709091 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.040092945 CET	49852	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.040098906 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.168047905 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.168118000 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.168162107 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.168287039 CET	49852	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.168617010 CET	49852	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.168632030 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.168652058 CET	49852	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.168657064 CET	443	49852	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.172643900 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.172735929 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.172878027 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.173085928 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.173120022 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.186299086 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.186827898 CET	49851	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.186873913 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.187385082 CET	49851	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.187393904 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.304312944 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.304903984 CET	49853	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.304945946 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.305382013 CET	49853	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.305392981 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.316378117 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.316709042 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.316788912 CET	49851	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.316852093 CET	49851	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.316884041 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.316903114 CET	49851	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.316912889 CET	443	49851	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.320205927 CET	49857	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.320230961 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.320321083 CET	49857	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.320527077 CET	49857	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.320542097 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.342284918 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.342911005 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.342926025 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.343347073 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.343350887 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.422840118 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.423491001 CET	49855	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.423528910 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.423964977 CET	49855	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.423975945 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.449686050 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.449784040 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.449853897 CET	49853	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.450051069 CET	49853	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.450079918 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.450104952 CET	49853	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.450119019 CET	443	49853	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.453727961 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.453758955 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.453867912 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.454076052 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.454101086 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.484030962 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.484061956 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.484110117 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.484139919 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.484188080 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.484390974 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.484415054 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.484422922 CET	49854	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.484426975 CET	443	49854	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.487523079 CET	49859	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.487539053 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.487613916 CET	49859	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.487807989 CET	49859	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.487818956 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.554585934 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.554644108 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.554707050 CET	49855	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.554963112 CET	49855	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.554986000 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.555015087 CET	49855	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.555028915 CET	443	49855	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.557497025 CET	49860	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.557574034 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.557662964 CET	49860	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.557845116 CET	49860	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.557872057 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.907205105 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.907934904 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.907970905 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:42.908452988 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:42.908466101 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.038283110 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.038319111 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.038366079 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.038429022 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.038510084 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.038844109 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.038880110 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.038907051 CET	49856	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.038922071 CET	443	49856	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.042306900 CET	49861	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.042340040 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.042432070 CET	49861	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.042608023 CET	49861	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.042627096 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.053931952 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.054414034 CET	49857	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.054425955 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.054848909 CET	49857	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.054852962 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.184997082 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.185072899 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.185134888 CET	49857	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.185410023 CET	49857	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.185417891 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.185439110 CET	49857	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.185442924 CET	443	49857	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.189168930 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.189218998 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.189337015 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.189548969 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.189567089 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.200643063 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.201205969 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.201235056 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.201747894 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.201759100 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.228452921 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.228863001 CET	49859	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.228878021 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.229511023 CET	49859	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.229516029 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.283385992 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.283804893 CET	49860	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.283838987 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.284368038 CET	49860	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.284374952 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.332537889 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.332570076 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.332619905 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.332637072 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.332704067 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.332948923 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.332978964 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.333028078 CET	49858	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.333041906 CET	443	49858	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.336458921 CET	49863	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.336478949 CET	443	49863	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.336575031 CET	49863	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.336739063 CET	49863	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.336752892 CET	443	49863	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.361459970 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.361546040 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.361608982 CET	49859	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.361774921 CET	49859	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.361785889 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.361803055 CET	49859	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.361807108 CET	443	49859	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.364371061 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.364393950 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.364484072 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.364748001 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.364762068 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.413604975 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.413662910 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.413743019 CET	49860	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.421876907 CET	49860	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.421911955 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.421928883 CET	49860	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.421936989 CET	443	49860	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.427227020 CET	49865	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.427267075 CET	443	49865	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.427411079 CET	49865	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.427531004 CET	49865	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.427539110 CET	443	49865	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.816696882 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.817218065 CET	49861	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.817229033 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.817656994 CET	49861	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.817661047 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.927856922 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.928458929 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.928500891 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.929183006 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.929200888 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.960258961 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.960437059 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.960505962 CET	49861	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.960649967 CET	49861	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.960659981 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.960669994 CET	49861	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.960680962 CET	443	49861	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.964011908 CET	49866	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.964054108 CET	443	49866	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:43.964138985 CET	49866	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.964364052 CET	49866	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:43.964380980 CET	443	49866	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.057780981 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.057815075 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.057873011 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.057899952 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.057940960 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.058273077 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.058300972 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.058316946 CET	49862	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.058326006 CET	443	49862	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.061942101 CET	49867	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.061986923 CET	443	49867	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.062064886 CET	49867	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.062243938 CET	49867	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.062261105 CET	443	49867	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.068747997 CET	443	49863	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.069359064 CET	49863	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.069367886 CET	443	49863	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.069782019 CET	49863	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.069786072 CET	443	49863	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.094897032 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.095283031 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.095298052 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.096966028 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.096971035 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.168483973 CET	443	49865	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.169198036 CET	49865	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.169224024 CET	443	49865	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.169934988 CET	49865	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.169939995 CET	443	49865	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.198398113 CET	443	49863	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.198554993 CET	443	49863	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.198766947 CET	49863	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.198766947 CET	49863	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.199044943 CET	49863	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.199049950 CET	443	49863	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.202162981 CET	49868	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.202240944 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.202414989 CET	49868	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.202610970 CET	49868	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.202646017 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.227534056 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.227565050 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.227612972 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.227663040 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.227686882 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.227917910 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.227929115 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.227961063 CET	49864	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.227966070 CET	443	49864	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.230690956 CET	49869	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.230721951 CET	443	49869	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.230931044 CET	49869	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.230988026 CET	49869	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.230994940 CET	443	49869	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.301098108 CET	443	49865	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.301160097 CET	443	49865	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.301410913 CET	49865	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.301410913 CET	49865	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.301791906 CET	49865	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.301809072 CET	443	49865	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.304398060 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.304487944 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.304660082 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.304874897 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.304912090 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.693104029 CET	443	49866	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.694262028 CET	49866	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.694262028 CET	49866	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.694282055 CET	443	49866	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.694297075 CET	443	49866	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.795897961 CET	443	49867	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.798271894 CET	49867	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.798271894 CET	49867	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.798345089 CET	443	49867	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.798391104 CET	443	49867	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.823859930 CET	443	49866	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.823921919 CET	443	49866	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.824305058 CET	49866	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.824305058 CET	49866	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.825259924 CET	49866	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.825277090 CET	443	49866	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.827673912 CET	49871	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.827708006 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.827951908 CET	49871	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.827951908 CET	49871	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.827987909 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.928025007 CET	443	49867	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.928179026 CET	443	49867	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.928442955 CET	49867	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.928442955 CET	49867	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.929852962 CET	49867	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.929888964 CET	443	49867	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.931906939 CET	49872	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.931957006 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.932228088 CET	49872	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.932228088 CET	49872	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.932308912 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.938019991 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.938976049 CET	49868	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.938976049 CET	49868	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.939019918 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.939064980 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.965089083 CET	443	49869	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.965890884 CET	49869	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.965928078 CET	443	49869	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:44.966130972 CET	49869	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:44.966145039 CET	443	49869	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.039536953 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.040400982 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.040400982 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.040415049 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.040432930 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.069242001 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.069426060 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.069545031 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.069736958 CET	49868	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.069736958 CET	49868	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.070004940 CET	49868	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.070033073 CET	443	49868	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.073174000 CET	49873	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.073215961 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.073483944 CET	49873	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.073483944 CET	49873	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.073520899 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.095968008 CET	443	49869	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.096036911 CET	443	49869	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.098326921 CET	49869	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.098326921 CET	49869	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.101520061 CET	49869	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.101524115 CET	49874	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.101562023 CET	443	49869	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.101569891 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.101877928 CET	49874	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.101929903 CET	49874	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.101942062 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.170686960 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.170730114 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.170775890 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.170820951 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.170857906 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.171190023 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.171190023 CET	49870	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.171214104 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.171236038 CET	443	49870	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.174948931 CET	49875	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.174997091 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.175338984 CET	49875	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.175338984 CET	49875	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.175379992 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.565200090 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.565841913 CET	49871	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.565860033 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.566241980 CET	49871	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.566247940 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.665052891 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.665611029 CET	49872	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.665637016 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.666131020 CET	49872	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.666137934 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.695734978 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.695895910 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.695992947 CET	49871	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.696167946 CET	49871	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.696182013 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.696198940 CET	49871	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.696204901 CET	443	49871	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.699465036 CET	49876	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.699484110 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.699654102 CET	49876	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.699743032 CET	49876	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.699750900 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.794754028 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.794814110 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.795033932 CET	49872	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.795278072 CET	49872	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.795310020 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.795356989 CET	49872	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.795375109 CET	443	49872	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.799179077 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.799233913 CET	443	49877	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.799360991 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.799563885 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.799588919 CET	443	49877	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.809508085 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.810257912 CET	49873	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.810282946 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.810817003 CET	49873	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.810822964 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.831445932 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.831903934 CET	49874	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.831939936 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.832446098 CET	49874	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.832456112 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.908248901 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.908747911 CET	49875	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.908778906 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.909332991 CET	49875	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.909339905 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.947854042 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.948005915 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.948115110 CET	49873	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.948417902 CET	49873	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.948417902 CET	49873	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.948451996 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.948468924 CET	443	49873	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.951956987 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.951977015 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.952075958 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.952281952 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.952299118 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.962958097 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.963092089 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.963184118 CET	49874	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.963278055 CET	49874	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.963289022 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.963300943 CET	49874	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.963308096 CET	443	49874	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.965709925 CET	49879	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.965754986 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:45.965909958 CET	49879	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.966072083 CET	49879	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:45.966097116 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.039650917 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.039702892 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.039807081 CET	49875	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.040024996 CET	49875	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.040036917 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.040052891 CET	49875	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.040059090 CET	443	49875	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.042646885 CET	49880	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.042665958 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.042752028 CET	49880	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.042936087 CET	49880	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.042944908 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.436543941 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.437068939 CET	49876	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.437083960 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.437669039 CET	49876	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.437675953 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.536679983 CET	443	49877	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.537282944 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.537369013 CET	443	49877	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.537992954 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.538007021 CET	443	49877	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.567754984 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.567842007 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.567898035 CET	49876	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.568257093 CET	49876	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.568274021 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.568289042 CET	49876	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.568295956 CET	443	49876	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.572396040 CET	49881	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.572431087 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.572539091 CET	49881	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.572691917 CET	49881	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.572724104 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.666420937 CET	443	49877	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.666475058 CET	443	49877	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.666796923 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.666796923 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.666796923 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.669637918 CET	49882	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.669668913 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.669749022 CET	49882	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.669955015 CET	49882	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.669975042 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.677747965 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.679136038 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.679157972 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.679913044 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.679919958 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.717859030 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.718420029 CET	49879	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.718482018 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.718940020 CET	49879	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.718956947 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.777823925 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.778249979 CET	49880	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.778259039 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.778867006 CET	49880	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.778875113 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.803824902 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.803900003 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.803952932 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.803963900 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.804009914 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.804068089 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.804186106 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.804195881 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.804209948 CET	49878	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.804214954 CET	443	49878	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.807020903 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.807113886 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.807215929 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.807380915 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.807415009 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.863079071 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.863135099 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.863214016 CET	49879	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.863415003 CET	49879	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.863460064 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.863492966 CET	49879	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.863507986 CET	443	49879	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.866580009 CET	49884	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.866617918 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.866714001 CET	49884	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.866889954 CET	49884	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.866909981 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.908320904 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.908405066 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.908524990 CET	49880	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.908766031 CET	49880	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.908781052 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.908796072 CET	49880	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.908802986 CET	443	49880	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.911629915 CET	49885	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.911719084 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.911823988 CET	49885	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.912003040 CET	49885	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.912039995 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:46.970846891 CET	49877	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:46.970911026 CET	443	49877	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.309328079 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.310158014 CET	49881	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.310199022 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.310806990 CET	49881	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.310818911 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.439768076 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.439938068 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.440048933 CET	49881	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.440184116 CET	49881	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.440208912 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.440234900 CET	49881	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.440249920 CET	443	49881	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.443229914 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.443269968 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.443355083 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.443476915 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.443485022 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.559134960 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.560532093 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.560581923 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.560935974 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.560947895 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.600322008 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.600714922 CET	49884	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.600729942 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.601063013 CET	49884	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.601069927 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.687848091 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.688445091 CET	49885	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.688512087 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.688627005 CET	49885	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.688643932 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.692771912 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.692842007 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.692950010 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.693022013 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.693078995 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.693137884 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.693161964 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.693186998 CET	49883	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.693200111 CET	443	49883	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.695830107 CET	49887	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.695890903 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.695993900 CET	49887	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.696182013 CET	49887	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.696228027 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.730226040 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.730384111 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.730420113 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.730493069 CET	49884	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.730571985 CET	49884	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.730586052 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.730603933 CET	49884	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.730612040 CET	443	49884	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.733025074 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.733105898 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.733201981 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.733397007 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.733428955 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.788053036 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.788558006 CET	49882	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.788578987 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.788862944 CET	49882	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.788870096 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.833446026 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.833523989 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.833790064 CET	49885	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.834234953 CET	49885	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.834234953 CET	49885	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.834280014 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.834310055 CET	443	49885	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.836114883 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.836154938 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.836246014 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.836409092 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.836420059 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.921042919 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.921066999 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.921133041 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.921231985 CET	49882	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.921523094 CET	49882	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.921538115 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.921552896 CET	49882	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.921560049 CET	443	49882	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.924420118 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.924506903 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:47.924606085 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.924823046 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:47.924855947 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.191227913 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.191731930 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.191750050 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.192387104 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.192393064 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.321407080 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.321480036 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.321544886 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.321563959 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.321641922 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.321702003 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.321825981 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.321841002 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.321860075 CET	49886	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.321866035 CET	443	49886	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.324724913 CET	49891	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.324769020 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.324875116 CET	49891	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.325058937 CET	49891	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.325074911 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.462490082 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.463323116 CET	49887	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.463412046 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.463654041 CET	49887	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.463670015 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.553008080 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.553529024 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.553563118 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.553766012 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.553772926 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.593427896 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.593585968 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.593811989 CET	49887	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.593910933 CET	49887	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.593910933 CET	49887	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.593957901 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.593991995 CET	443	49887	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.596692085 CET	49892	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.596786022 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.596888065 CET	49892	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.597042084 CET	49892	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.597065926 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.658153057 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.658588886 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.658643007 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.658927917 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.658942938 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.681621075 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.681649923 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.681693077 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.681719065 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.681775093 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.681957960 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.681972027 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.682018995 CET	49889	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.682027102 CET	443	49889	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.684164047 CET	49893	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.684210062 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.684300900 CET	49893	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.684483051 CET	49893	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.684500933 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.751975060 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:44:48.752038956 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:44:48.788435936 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.788834095 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.788856983 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.789421082 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.789427042 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.790612936 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.790649891 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.790698051 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.790702105 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.790754080 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.790936947 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.790951967 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.790966034 CET	49890	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.790971994 CET	443	49890	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.793575048 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.793653011 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.793752909 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.793850899 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.793881893 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.970866919 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.970891953 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.970957994 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.970977068 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.971045017 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.971272945 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.971333981 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.971369028 CET	49888	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.971385002 CET	443	49888	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.974271059 CET	49895	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.974320889 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:48.974412918 CET	49895	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.974626064 CET	49895	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:48.974641085 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.058005095 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.058753014 CET	49891	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.058774948 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.059061050 CET	49891	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.059067965 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.188369036 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.188560009 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.188625097 CET	49891	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.188720942 CET	49891	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.188741922 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.188756943 CET	49891	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.188765049 CET	443	49891	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.191579103 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.191607952 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.191679001 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.191864014 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.191884041 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.357079983 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.357609987 CET	49892	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.357633114 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.357997894 CET	49892	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.358005047 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.417315006 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.417726040 CET	49893	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.417774916 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.418102026 CET	49893	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.418114901 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.485646009 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.485815048 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.485897064 CET	49892	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.486093998 CET	49892	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.486113071 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.486124992 CET	49892	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.486131907 CET	443	49892	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.488727093 CET	49897	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.488822937 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.488915920 CET	49897	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.489126921 CET	49897	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.489161968 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.532593966 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.533025026 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.533037901 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.533642054 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.533648968 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.549825907 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.549870968 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.549937963 CET	49893	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.550148964 CET	49893	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.550179005 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.550228119 CET	49893	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.550245047 CET	443	49893	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.553378105 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.553402901 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.553482056 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.553580046 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.553587914 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.663716078 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.663752079 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.663800001 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.663820028 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.663887024 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.664148092 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.664166927 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.664179087 CET	49894	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.664186001 CET	443	49894	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.667378902 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.667431116 CET	443	49899	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.667521000 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.667763948 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.667790890 CET	443	49899	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.717638969 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.718236923 CET	49895	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.718297958 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.718611956 CET	49895	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.718626976 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.851145029 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.851193905 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.851311922 CET	49895	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.851438046 CET	49895	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.851485014 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.851516962 CET	49895	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.851535082 CET	443	49895	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.853692055 CET	49900	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.853727102 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:49.853830099 CET	49900	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.854034901 CET	49900	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:49.854049921 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.226110935 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.226772070 CET	49897	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.226819038 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.227435112 CET	49897	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.227447987 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.263462067 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.264097929 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.264118910 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.264609098 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.264614105 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.294466972 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.297317982 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.297328949 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.297950983 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.297955990 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.354743958 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.354902983 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.355294943 CET	49897	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.356014013 CET	49897	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.356014967 CET	49897	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.356060982 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.356107950 CET	443	49897	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.358531952 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.358628035 CET	443	49901	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.358958960 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.358958960 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.359045982 CET	443	49901	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.405335903 CET	443	49899	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.405791044 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.405889034 CET	443	49899	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.406404018 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.406419039 CET	443	49899	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.427225113 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.427259922 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.427297115 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.427491903 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.427491903 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.427577972 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.427587032 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.427597046 CET	49898	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.427601099 CET	443	49898	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.430238008 CET	49902	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.430267096 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.430346966 CET	49902	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.430468082 CET	49902	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.430484056 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.451661110 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.451735020 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.451868057 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.451981068 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.452279091 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.452279091 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.452279091 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.454516888 CET	49903	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.454564095 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.454763889 CET	49903	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.454799891 CET	49903	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.454808950 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.537636042 CET	443	49899	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.537709951 CET	443	49899	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.538057089 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.538058043 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.538058043 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.540730000 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.540791035 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.540899992 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.541075945 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.541110039 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.583112955 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.583875895 CET	49900	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.583898067 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.584434032 CET	49900	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.584440947 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.714818001 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.714890003 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.715245008 CET	49900	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.715291023 CET	49900	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.715303898 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.715368986 CET	49900	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.715373993 CET	443	49900	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.718970060 CET	49905	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.718997955 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.719101906 CET	49905	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.719297886 CET	49905	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.719304085 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.767494917 CET	49896	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.767520905 CET	443	49896	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:50.845726967 CET	49899	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:50.845798969 CET	443	49899	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.107373953 CET	443	49901	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.108174086 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.108212948 CET	443	49901	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.108755112 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.108769894 CET	443	49901	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.158658981 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.159142971 CET	49902	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.159162998 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.159698009 CET	49902	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.159702063 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.193707943 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.194298983 CET	49903	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.194335938 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.194807053 CET	49903	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.194816113 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.238848925 CET	443	49901	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.238996029 CET	443	49901	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.239264011 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.239264011 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.239264011 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.242638111 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.242683887 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.242774963 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.242922068 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.242932081 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.270709991 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.271241903 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.271270037 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.271838903 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.271851063 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.289846897 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.289908886 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.289994001 CET	49902	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.290249109 CET	49902	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.290275097 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.290285110 CET	49902	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.290290117 CET	443	49902	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.293642998 CET	49907	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.293668985 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.293761015 CET	49907	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.293901920 CET	49907	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.293910980 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.324544907 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.324701071 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.324877977 CET	49903	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.325123072 CET	49903	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.325123072 CET	49903	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.325167894 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.325202942 CET	443	49903	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.328675032 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.328722954 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.328826904 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.328978062 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.328994989 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.400253057 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.401287079 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.401343107 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.401391029 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.401437998 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.401479006 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.401479006 CET	49904	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.401511908 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.401535034 CET	443	49904	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.404351950 CET	49909	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.404381990 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.404462099 CET	49909	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.404601097 CET	49909	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.404617071 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.451144934 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.451721907 CET	49905	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.451745033 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.452347994 CET	49905	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.452367067 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.455070972 CET	49901	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.455115080 CET	443	49901	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.582942009 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.583003998 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.583055019 CET	49905	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.583297968 CET	49905	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.583317041 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.583369017 CET	49905	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.583374023 CET	443	49905	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.586648941 CET	49910	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.586703062 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.586802006 CET	49910	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.586962938 CET	49910	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.586975098 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.979386091 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.980031967 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.980093002 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:51.980686903 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:51.980707884 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.054016113 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.054663897 CET	49907	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.054675102 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.055346966 CET	49907	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.055351973 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.068411112 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.068754911 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.068820953 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.069250107 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.069266081 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.114656925 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.114691019 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.114739895 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.114761114 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.114795923 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.115024090 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.115046978 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.115061045 CET	49906	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.115067959 CET	443	49906	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.118412018 CET	49911	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.118434906 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.118521929 CET	49911	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.118653059 CET	49911	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.118665934 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.179495096 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.180043936 CET	49909	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.180051088 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.180692911 CET	49909	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.180696964 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.198261976 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.198334932 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.198401928 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.198470116 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.198637009 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.198700905 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.198776960 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.198815107 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.198841095 CET	49908	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.198856115 CET	443	49908	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.200897932 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.200942993 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.200990915 CET	49907	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.201138973 CET	49907	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.201147079 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.201155901 CET	49907	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.201159954 CET	443	49907	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.203077078 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.203114033 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.203219891 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.203475952 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.203491926 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.204966068 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.205003023 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.205073118 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.205271006 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.205286980 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.324515104 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.324599028 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.324652910 CET	49909	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.324970007 CET	49909	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.324979067 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.324989080 CET	49909	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.324994087 CET	443	49909	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.328710079 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.328747034 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.328826904 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.329051971 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.329060078 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.939291000 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:52.939328909 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:52.939416885 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:52.939888000 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:52.939903021 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:52.948859930 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.949453115 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.949467897 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.950053930 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.950059891 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.951468945 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.951947927 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.952030897 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:52.952462912 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:52.952476978 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.000756979 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.001744032 CET	49910	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.001813889 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.002396107 CET	49910	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.002412081 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.056651115 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.057356119 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.057373047 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.058089972 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.058099031 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.066915989 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.067404032 CET	49911	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.067419052 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.067996979 CET	49911	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.068001986 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.090150118 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.090178013 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.090270996 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.090279102 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.090338945 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.090662956 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.090675116 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.090708017 CET	49912	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.090713024 CET	443	49912	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.094356060 CET	49916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.094413996 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.094510078 CET	49916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.094739914 CET	49916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.094754934 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.116652012 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.116688013 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.116746902 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.116893053 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.117225885 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.117225885 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.117225885 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.120059967 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.120090008 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.120179892 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.120342016 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.120359898 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.133485079 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.133512974 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.133554935 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.133836985 CET	49910	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.134049892 CET	49910	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.134049892 CET	49910	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.134073973 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.134088039 CET	443	49910	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.136619091 CET	49918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.136665106 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.136759996 CET	49918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.136950970 CET	49918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.136976957 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.185482025 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.185513973 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.185568094 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.185578108 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.185626030 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.185836077 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.185843945 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.185856104 CET	49914	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.185859919 CET	443	49914	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.188980103 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.188993931 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.189062119 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.189210892 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.189225912 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.274310112 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.274496078 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.274554014 CET	49911	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.274719954 CET	49911	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.274733067 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.274744987 CET	49911	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.274749994 CET	443	49911	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.277672052 CET	49920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.277719021 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.277811050 CET	49920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.277966022 CET	49920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.277981997 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.423881054 CET	49913	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.423921108 CET	443	49913	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.708350897 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:53.708508015 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:53.712002993 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:53.712014914 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:53.712428093 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:53.727458954 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:53.771389961 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:53.876355886 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.877259016 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.877274990 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.877918959 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.877924919 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.887408018 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.887970924 CET	49918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.888017893 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.888390064 CET	49918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.888398886 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.891254902 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.891645908 CET	49916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.891660929 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.891983032 CET	49916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.891990900 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.921272039 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.921876907 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.921896935 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.922178030 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:53.922183990 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:53.978991985 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:53.979049921 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:53.979093075 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:53.979211092 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:53.979226112 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:53.979304075 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:53.979341030 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:54.022876024 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.022981882 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.023452044 CET	49918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.023540974 CET	49918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.023582935 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.023606062 CET	49918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.023616076 CET	443	49918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.025594950 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.025631905 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.025685072 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.025721073 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.025849104 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.025943041 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.025959969 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.025975943 CET	49917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.025995970 CET	443	49917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.027273893 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.027296066 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.027412891 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.027530909 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.027543068 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.028605938 CET	49922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.028693914 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.028785944 CET	49922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.028970003 CET	49922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.029000998 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.030121088 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.030574083 CET	49920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.030591965 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.030987024 CET	49920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.030997992 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.033783913 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.033982038 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.034080029 CET	49916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.034313917 CET	49916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.034347057 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.034364939 CET	49916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.034385920 CET	443	49916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.036847115 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.036854029 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.036955118 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.037142992 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.037153959 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.051827908 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.051856041 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.051906109 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.051948071 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.052021027 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.052040100 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.052047968 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.052066088 CET	49919	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.052073956 CET	443	49919	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.053700924 CET	49924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.053792000 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.053900003 CET	49924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.053993940 CET	49924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.054027081 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.097474098 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:54.097536087 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:54.097608089 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:54.097784996 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:54.098217010 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:54.098232985 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:54.098251104 CET	49915	443	192.168.2.5	172.202.163.200
Nov 16, 2024 16:44:54.098257065 CET	443	49915	172.202.163.200	192.168.2.5
Nov 16, 2024 16:44:54.158735991 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.158879042 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.159050941 CET	49920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.159255981 CET	49920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.159255981 CET	49920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.159291983 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.159307003 CET	443	49920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.161640882 CET	49925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.161663055 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.161729097 CET	49925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.161847115 CET	49925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.161863089 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.783242941 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.783910990 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.783957958 CET	49924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.783993959 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.784240961 CET	49924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.784248114 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.784255981 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.784271002 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.784878016 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.784883022 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.788568974 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.788959026 CET	49922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.789007902 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.789416075 CET	49922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.789433956 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.827167988 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.827955008 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.827961922 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.828480959 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.828484058 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.880615950 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.881382942 CET	49925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.881395102 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.881896019 CET	49925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.881901979 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.912483931 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.912548065 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.912739038 CET	49924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.913139105 CET	49924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.913139105 CET	49924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.913184881 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.913213968 CET	443	49924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.916194916 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.916244030 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.916340113 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.916465044 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.916482925 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.918716908 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.918785095 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.918837070 CET	49922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.918927908 CET	49922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.918945074 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.918958902 CET	49922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.918966055 CET	443	49922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.921271086 CET	49927	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.921293974 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.921361923 CET	49927	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.921478033 CET	49927	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.921492100 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.924624920 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.924653053 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.924705982 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.924747944 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.924784899 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.924875021 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.924889088 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.924896955 CET	49921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.924902916 CET	443	49921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.927217960 CET	49928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.927249908 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.927336931 CET	49928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.927589893 CET	49928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.927602053 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.955580950 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.955651999 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.955713987 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.955722094 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.955756903 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.955797911 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.955862045 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.955866098 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.955888033 CET	49923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.955892086 CET	443	49923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.959361076 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.959425926 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:54.959551096 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.959677935 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:54.959714890 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.024710894 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.024780989 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.024866104 CET	49925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.025185108 CET	49925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.025197029 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.025207043 CET	49925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.025211096 CET	443	49925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.027343035 CET	49930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.027354956 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.027517080 CET	49930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.027702093 CET	49930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.027712107 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.648531914 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.649063110 CET	49928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.649089098 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.649496078 CET	49928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.649502993 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.661736012 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.662298918 CET	49927	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.662323952 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.662781000 CET	49927	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.662789106 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.667715073 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.668132067 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.668159008 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.668468952 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.668474913 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.695358038 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.695816040 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.695847988 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.696413994 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.696420908 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.761754990 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.762413979 CET	49930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.762425900 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.763284922 CET	49930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.763289928 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.777659893 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.777729988 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.777787924 CET	49928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.777928114 CET	49928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.777942896 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.777952909 CET	49928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.777957916 CET	443	49928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.781590939 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.781687975 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.781794071 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.781953096 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.781989098 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.792762041 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.792892933 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.792960882 CET	49927	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.793515921 CET	49927	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.793530941 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.793544054 CET	49927	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.793549061 CET	443	49927	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.799170017 CET	49932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.799259901 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.799354076 CET	49932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.799544096 CET	49932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.799576044 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.802680016 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.802712917 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.802772999 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.802773952 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.802830935 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.807173014 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.807205915 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.807234049 CET	49926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.807250023 CET	443	49926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.809259892 CET	49933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.809303999 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.809381008 CET	49933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.809591055 CET	49933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.809608936 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.832650900 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.832714081 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.832787037 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.832817078 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.832854033 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.832914114 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.833020926 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.833020926 CET	49929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.833045006 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.833065987 CET	443	49929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.835936069 CET	49934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.835966110 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.836070061 CET	49934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.836332083 CET	49934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.836358070 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.903656006 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.903819084 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.903897047 CET	49930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.903995037 CET	49930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.904011965 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.904021978 CET	49930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.904027939 CET	443	49930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.906363010 CET	49935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.906380892 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:55.906657934 CET	49935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.906657934 CET	49935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:55.906687975 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.510147095 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.512620926 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.512675047 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.513123035 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.513137102 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.539980888 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.540760994 CET	49932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.540849924 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.541105032 CET	49932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.541120052 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.544713020 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.545032024 CET	49933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.545067072 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.545495033 CET	49933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.545502901 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.570558071 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.571202993 CET	49934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.571265936 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.571518898 CET	49934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.571535110 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.636501074 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.636904001 CET	49935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.636918068 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.637510061 CET	49935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.637514114 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.639923096 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.640233040 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.640280962 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.640291929 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.640348911 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.640413046 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.640428066 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.640435934 CET	49931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.640441895 CET	443	49931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.643626928 CET	49936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.643646955 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.643738031 CET	49936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.643922091 CET	49936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.643933058 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.671252966 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.671334028 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.671566963 CET	49932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.671763897 CET	49932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.671763897 CET	49932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.671809912 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.671838045 CET	443	49932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.673564911 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.673717022 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.673788071 CET	49933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.674030066 CET	49933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.674046040 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.674058914 CET	49933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.674065113 CET	443	49933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.675360918 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.675436974 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.676135063 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.676703930 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.676716089 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.677064896 CET	49938	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.677076101 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.677149057 CET	49938	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.677262068 CET	49938	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.677268982 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.700573921 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.700644016 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.700750113 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.700969934 CET	49934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.700970888 CET	49934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.701884031 CET	49934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.701922894 CET	443	49934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.703597069 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.703640938 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.703759909 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.703947067 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.703965902 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.766355991 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.766395092 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.766557932 CET	49935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.766644955 CET	49935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.766658068 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.766669989 CET	49935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.766676903 CET	443	49935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.769406080 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.769427061 CET	443	49940	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:56.769524097 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.769690037 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:56.769704103 CET	443	49940	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.386440039 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.387340069 CET	49936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.387408972 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.387835026 CET	49936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.387850046 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.404989958 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.405735970 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.405770063 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.406279087 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.406286955 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.408432007 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.408900023 CET	49938	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.408962965 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.409411907 CET	49938	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.409425974 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.434709072 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.435280085 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.435309887 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.435899973 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.435906887 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.513732910 CET	443	49940	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.514194965 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.514226913 CET	443	49940	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.514739037 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.514744997 CET	443	49940	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.515808105 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.516094923 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.516184092 CET	49936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.516271114 CET	49936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.516272068 CET	49936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.516316891 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.516344070 CET	443	49936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.519649029 CET	49941	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.519741058 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.519850969 CET	49941	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.522711992 CET	49941	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.522748947 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.535270929 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.535303116 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.535361052 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.535361052 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.535520077 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.537353992 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.537373066 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.537386894 CET	49937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.537394047 CET	443	49937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.539038897 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.539185047 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.539246082 CET	49938	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.539554119 CET	49938	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.539572954 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.539597034 CET	49938	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.539609909 CET	443	49938	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.541434050 CET	49942	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.541472912 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.541547060 CET	49942	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.542025089 CET	49942	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.542040110 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.542911053 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.542937040 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.543013096 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.543152094 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.543176889 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.564729929 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.564801931 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.564858913 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.564871073 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.564913988 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.564965010 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.567574024 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.567581892 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.567590952 CET	49939	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.567595005 CET	443	49939	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.569130898 CET	49944	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.569154978 CET	443	49944	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.569230080 CET	49944	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.569317102 CET	49944	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.569325924 CET	443	49944	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.770127058 CET	443	49940	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.770282984 CET	443	49940	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.770457029 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.770457029 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.770457029 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.772089005 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.772135019 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:57.772207022 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.772301912 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:57.772310019 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.079961061 CET	49940	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.079977989 CET	443	49940	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.275631905 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.276256084 CET	49942	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.276278973 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.276926994 CET	49942	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.276932001 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.286484003 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.287026882 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.287091017 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.287642002 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.287656069 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.305166960 CET	443	49944	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.305588007 CET	49944	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.305600882 CET	443	49944	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.306221008 CET	49944	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.306226015 CET	443	49944	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.406039953 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.406126022 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.406200886 CET	49942	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.406380892 CET	49942	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.406426907 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.406460047 CET	49942	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.406476021 CET	443	49942	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.410625935 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.410650969 CET	443	49946	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.410769939 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.410950899 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.410962105 CET	443	49946	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.435225010 CET	443	49944	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.435441971 CET	443	49944	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.435549974 CET	49944	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.435549974 CET	49944	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.435599089 CET	49944	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.435606003 CET	443	49944	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.438059092 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.438154936 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.438241959 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.438404083 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.438438892 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.506597042 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.507160902 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.507201910 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.507909060 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.507920027 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.510615110 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.511013985 CET	49941	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.511049986 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.511440992 CET	49941	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.511451960 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.626072884 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.626100063 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.626143932 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.626176119 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.626225948 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.626596928 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.626637936 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.626679897 CET	49943	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.626696110 CET	443	49943	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.629946947 CET	49948	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.629973888 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.630052090 CET	49948	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.630285978 CET	49948	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.630295038 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.637245893 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.637317896 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.637412071 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.637422085 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.637551069 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.637551069 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.637598038 CET	49945	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.637623072 CET	443	49945	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.640191078 CET	49949	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.640281916 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.640387058 CET	49949	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.640543938 CET	49949	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.640578985 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.668011904 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.668088913 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.668164015 CET	49941	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.668365955 CET	49941	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.668402910 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.668431997 CET	49941	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.668446064 CET	443	49941	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.670972109 CET	49950	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.670979977 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:58.671046019 CET	49950	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.671200991 CET	49950	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:58.671211958 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.175529003 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.176258087 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.176326990 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.176901102 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.176914930 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.241879940 CET	443	49946	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.242882013 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.242896080 CET	443	49946	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.243788958 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.243794918 CET	443	49946	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.304841042 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.304913998 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.305016041 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.305016994 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.305098057 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.305342913 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.305381060 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.305408001 CET	49947	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.305423975 CET	443	49947	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.309072971 CET	49951	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.309165955 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.309381008 CET	49951	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.309537888 CET	49951	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.309561968 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.374560118 CET	443	49946	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.374617100 CET	443	49946	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.374999046 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.374999046 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.374999046 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.378218889 CET	49952	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.378268957 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.378374100 CET	49952	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.378572941 CET	49952	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.378598928 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.386954069 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.387455940 CET	49949	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.387485981 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.388053894 CET	49949	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.388066053 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.410356045 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.410795927 CET	49950	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.410815001 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.411199093 CET	49950	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.411204100 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.413958073 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.414252043 CET	49948	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.414261103 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.414699078 CET	49948	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.414704084 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.517975092 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.518136024 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.518352032 CET	49949	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.518431902 CET	49949	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.518464088 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.518488884 CET	49949	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.518502951 CET	443	49949	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.522006989 CET	49953	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.522043943 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.522126913 CET	49953	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.522313118 CET	49953	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.522325039 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.540963888 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.541109085 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.541241884 CET	49950	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.541395903 CET	49950	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.541395903 CET	49950	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.541408062 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.541415930 CET	443	49950	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.543930054 CET	49954	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.543978930 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.544079065 CET	49954	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.544258118 CET	49954	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.544285059 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.547992945 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.548146963 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.548237085 CET	49948	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.548268080 CET	49948	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.548271894 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.548290968 CET	49948	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.548300028 CET	443	49948	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.550772905 CET	49955	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.550781012 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.550848961 CET	49955	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.551007986 CET	49955	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.551016092 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:44:59.689475060 CET	49946	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:44:59.689501047 CET	443	49946	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.045649052 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.046552896 CET	49951	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.046618938 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.046919107 CET	49951	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.046936035 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.110537052 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.111356020 CET	49952	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.111391068 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.111922979 CET	49952	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.111931086 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.177498102 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.177624941 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.177726984 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.177850008 CET	49951	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.178081036 CET	49951	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.178128958 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.178163052 CET	49951	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.178179026 CET	443	49951	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.181819916 CET	49956	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.181849003 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.181945086 CET	49956	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.182141066 CET	49956	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.182153940 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.239408016 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.239500999 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.239571095 CET	49952	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.239794016 CET	49952	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.239829063 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.239847898 CET	49952	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.239859104 CET	443	49952	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.243499041 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.243592024 CET	443	49957	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.243680000 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.243880033 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.243916988 CET	443	49957	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.279298067 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.280474901 CET	49953	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.280504942 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.281189919 CET	49953	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.281196117 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.289386034 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.289885998 CET	49955	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.289892912 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.290231943 CET	49955	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.290236950 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.326906919 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.327739000 CET	49954	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.327774048 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.328021049 CET	49954	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.328028917 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.450527906 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.450711966 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.450923920 CET	49953	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.451303959 CET	49953	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.451328039 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.451344967 CET	49953	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.451350927 CET	443	49953	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.455228090 CET	49958	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.455251932 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.455352068 CET	49958	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.455471039 CET	49958	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.455475092 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.455745935 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.455826044 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.455897093 CET	49954	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.455950975 CET	49954	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.455976963 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.455991983 CET	49954	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.456001043 CET	443	49954	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.457942963 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.457994938 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.458090067 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.458264112 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.458291054 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.641107082 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.641210079 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.641484976 CET	49955	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.641880035 CET	49955	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.641896963 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.641907930 CET	49955	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.641912937 CET	443	49955	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.645528078 CET	49960	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.645560026 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.645658016 CET	49960	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.645872116 CET	49960	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.645878077 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.919291019 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.920299053 CET	49956	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.920320988 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:00.920645952 CET	49956	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:00.920650005 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.047888994 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.048033953 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.048224926 CET	49956	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.048557997 CET	49956	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.048564911 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.048583984 CET	49956	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.048588991 CET	443	49956	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.052392006 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.052494049 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.052613020 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.052813053 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.052850008 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.189073086 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.189688921 CET	49958	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.189703941 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.190252066 CET	49958	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.190258026 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.192230940 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.193223000 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.193280935 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.193603992 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.193619013 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.317581892 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.317747116 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.317811966 CET	49958	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.318099976 CET	49958	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.318105936 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.318114996 CET	49958	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.318119049 CET	443	49958	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.321757078 CET	49963	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.321773052 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.321856022 CET	49963	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.321980000 CET	49963	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.321985006 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.322515965 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.322577000 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.322645903 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.322674990 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.322746038 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.322804928 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.322804928 CET	49959	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.322848082 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.322879076 CET	443	49959	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.325059891 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.325093985 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.325174093 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.325265884 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.325278044 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.388510942 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.389072895 CET	49960	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.389091015 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.389652967 CET	49960	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.389659882 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.518091917 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.518241882 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.518309116 CET	49960	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.518388987 CET	49960	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.518399954 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.518409967 CET	49960	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.518414021 CET	443	49960	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.521344900 CET	49965	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.521445036 CET	443	49965	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.521548033 CET	49965	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.521785021 CET	49965	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.521823883 CET	443	49965	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.777167082 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.777741909 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.777767897 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.778227091 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.778233051 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.906018972 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.906099081 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.906207085 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.906346083 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.906517029 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.906896114 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.906896114 CET	49961	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.906908035 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.906915903 CET	443	49961	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.910305023 CET	49966	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.910336971 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.910505056 CET	49966	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.910595894 CET	49966	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.910607100 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.991440058 CET	443	49957	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.992129087 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.992214918 CET	443	49957	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:01.995428085 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:01.995443106 CET	443	49957	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.056442022 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.057321072 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.057338953 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.057698011 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.057703018 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.073426962 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.074321032 CET	49963	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.074321032 CET	49963	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.074363947 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.074403048 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.126589060 CET	443	49957	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.126733065 CET	443	49957	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.127038956 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.127038956 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.127038956 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.130254984 CET	49967	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.130351067 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.130460024 CET	49967	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.130625963 CET	49967	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.130661964 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.187685013 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.187763929 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.187871933 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.187961102 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.187961102 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.188083887 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.188106060 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.188121080 CET	49964	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.188127995 CET	443	49964	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.190376997 CET	49968	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.190397978 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.190474987 CET	49968	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.190593004 CET	49968	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.190599918 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.273763895 CET	443	49965	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.274427891 CET	49965	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.274497032 CET	443	49965	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.274727106 CET	49965	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.274741888 CET	443	49965	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.290693998 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.290860891 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.290997982 CET	49963	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.291053057 CET	49963	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.291053057 CET	49963	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.291083097 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.291106939 CET	443	49963	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.293385983 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.293415070 CET	443	49969	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.293629885 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.293782949 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.293793917 CET	443	49969	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.403419018 CET	443	49965	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.403570890 CET	443	49965	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.403846979 CET	49965	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.403846979 CET	49965	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.404855013 CET	49965	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.404896021 CET	443	49965	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.405991077 CET	49970	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.406069994 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.406150103 CET	49970	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.406258106 CET	49970	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.406277895 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.439589024 CET	49957	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.439655066 CET	443	49957	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.660234928 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.662714005 CET	49966	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.662744045 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.663129091 CET	49966	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.663136005 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.791048050 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.791220903 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.791460037 CET	49966	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.791507006 CET	49966	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.791507006 CET	49966	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.791531086 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.791595936 CET	443	49966	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.794696093 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.794769049 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.794847965 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.794979095 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.795000076 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.872838974 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.873255014 CET	49967	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.873316050 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.873836994 CET	49967	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.873852015 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.924715996 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.925260067 CET	49968	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.925296068 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:02.925698996 CET	49968	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:02.925710917 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.002048969 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.002203941 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.002420902 CET	49967	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.002659082 CET	49967	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.002712011 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.002743959 CET	49967	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.002759933 CET	443	49967	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.005574942 CET	49972	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.005621910 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.005721092 CET	49972	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.005870104 CET	49972	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.005892992 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.032850027 CET	443	49969	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.033341885 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.033363104 CET	443	49969	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.033727884 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.033735037 CET	443	49969	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.054867983 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.054940939 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.055056095 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.055139065 CET	49968	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.055197001 CET	49968	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.055197001 CET	49968	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.055233955 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.055259943 CET	443	49968	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.057969093 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.058007002 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.058087111 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.058211088 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.058222055 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.154273033 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.154762983 CET	49970	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.154788971 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.155249119 CET	49970	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.155260086 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.161739111 CET	443	49969	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.161890984 CET	443	49969	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.162297010 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.162297010 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.162297964 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.164695024 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.164789915 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.164985895 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.164985895 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.165076971 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.283011913 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.283165932 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.283235073 CET	49970	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.283302069 CET	49970	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.283302069 CET	49970	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.283346891 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.283375025 CET	443	49970	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.285834074 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.285876989 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.285950899 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.286091089 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.286108971 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.376818895 CET	49969	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.376847029 CET	443	49969	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.596771955 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.597253084 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.597271919 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.597850084 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.597856998 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.736506939 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.736567974 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.736697912 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.736717939 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.736999989 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.737010956 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.737020969 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.737823963 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.737910032 CET	443	49971	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.738038063 CET	49971	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.739531994 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.739578009 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.739653111 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.739770889 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.739794970 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.750247002 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.750849962 CET	49972	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.750914097 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.751287937 CET	49972	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.751302958 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.796112061 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.796662092 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.796693087 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.797218084 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.797245026 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.837428093 CET	56915	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:45:03.842432976 CET	53	56915	1.1.1.1	192.168.2.5
Nov 16, 2024 16:45:03.842530966 CET	56915	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:45:03.842570066 CET	56915	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:45:03.847517967 CET	53	56915	1.1.1.1	192.168.2.5
Nov 16, 2024 16:45:03.881385088 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.881452084 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.881537914 CET	49972	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.881639957 CET	49972	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.881684065 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.881736040 CET	49972	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.881752968 CET	443	49972	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.884411097 CET	56916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.884460926 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.884572029 CET	56916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.884699106 CET	56916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.884718895 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.916892052 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.917289019 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.917330027 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.917958975 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.918015003 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.925616980 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.925724983 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.925784111 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.925802946 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.925862074 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.925910950 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.925931931 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.925947905 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.925961018 CET	49973	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.925968885 CET	443	49973	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.928235054 CET	56917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.928325891 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:03.928580999 CET	56917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.928581953 CET	56917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:03.928715944 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.049036980 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.049087048 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.049216986 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.049293041 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.049293995 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.049395084 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.049395084 CET	49974	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.049438000 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.049478054 CET	443	49974	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.051754951 CET	56918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.051809072 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.051913977 CET	56918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.052088022 CET	56918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.052105904 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.325334072 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.325875998 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.325891972 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.326594114 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.326606989 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.449369907 CET	53	56915	1.1.1.1	192.168.2.5
Nov 16, 2024 16:45:04.450263977 CET	56915	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:45:04.455715895 CET	53	56915	1.1.1.1	192.168.2.5
Nov 16, 2024 16:45:04.455812931 CET	56915	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:45:04.481945038 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.482502937 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.482532978 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.483058929 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.483066082 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.520392895 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.520415068 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.520464897 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.520514965 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.520572901 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.520806074 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.520828962 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.520843029 CET	49975	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.520850897 CET	443	49975	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.524157047 CET	56920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.524194002 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.524297953 CET	56920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.524467945 CET	56920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.524481058 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.609795094 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.609850883 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.609992981 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.610016108 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.610060930 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.610119104 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.610193014 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.610207081 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.610241890 CET	49976	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.610249043 CET	443	49976	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.612590075 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.612608910 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.612675905 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.612773895 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.612782001 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.630314112 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.630702019 CET	56916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.630722046 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.631242037 CET	56916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.631248951 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.663181067 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.663574934 CET	56917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.663636923 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.664089918 CET	56917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.664103985 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.676098108 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:45:04.676192999 CET	443	49710	68.183.112.81	192.168.2.5
Nov 16, 2024 16:45:04.676264048 CET	49710	443	192.168.2.5	68.183.112.81
Nov 16, 2024 16:45:04.759572983 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.759649038 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.759733915 CET	56916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.760014057 CET	56916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.760039091 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.760080099 CET	56916	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.760087967 CET	443	56916	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.763259888 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.763313055 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.763420105 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.763583899 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.763619900 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.777714968 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.778287888 CET	56918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.778328896 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.778939962 CET	56918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.778947115 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.791390896 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.791480064 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.791579008 CET	56917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.791723013 CET	56917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.791723013 CET	56917	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.791766882 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.791793108 CET	443	56917	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.794480085 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.794522047 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.794604063 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.794812918 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.794831038 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.910033941 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.910231113 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.910300970 CET	56918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.910336018 CET	56918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.910356045 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.910368919 CET	56918	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.910376072 CET	443	56918	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.912888050 CET	56924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.912925959 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:04.913000107 CET	56924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.913182974 CET	56924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:04.913201094 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.287331104 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.287997961 CET	56920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.288033009 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.288511038 CET	56920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.288527012 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.362502098 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.363300085 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.363338947 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.363838911 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.363846064 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.421983004 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.422149897 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.422374010 CET	56920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.422563076 CET	56920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.422563076 CET	56920	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.422625065 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.422656059 CET	443	56920	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.426970959 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.427062988 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.427267075 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.427356958 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.427375078 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.496699095 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.496762991 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.496906042 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.497082949 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.497082949 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.497359037 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.497359037 CET	56921	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.497379065 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.497390985 CET	443	56921	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.500475883 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.500524044 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.500706911 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.500801086 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.500813007 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.523238897 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.524003029 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.524013996 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.524583101 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.524588108 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.526247025 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.526799917 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.526858091 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.527359009 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.527371883 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.632730007 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.633519888 CET	56924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.633552074 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.634057045 CET	56924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.634066105 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.644418955 CET	56927	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:45:05.644471884 CET	443	56927	142.250.186.164	192.168.2.5
Nov 16, 2024 16:45:05.644766092 CET	56927	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:45:05.644896984 CET	56927	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:45:05.644916058 CET	443	56927	142.250.186.164	192.168.2.5
Nov 16, 2024 16:45:05.662128925 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.662194014 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.662297010 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.662326097 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.662600994 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.662686110 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.662686110 CET	56922	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.662730932 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.662760973 CET	443	56922	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.665671110 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.665705919 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.665893078 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.665972948 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.665978909 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.765001059 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.765028954 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.765084982 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.765439987 CET	56924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.765717030 CET	56924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.765717030 CET	56924	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.765752077 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.765769005 CET	443	56924	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.768721104 CET	56929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.768801928 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.768902063 CET	56929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.769136906 CET	56929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.769166946 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773173094 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773216009 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773237944 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773283005 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.773307085 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773339987 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.773365974 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.773369074 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773385048 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773442030 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.773451090 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773478031 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773531914 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.773552895 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.773587942 CET	56923	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.773596048 CET	443	56923	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.776916027 CET	56930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.776953936 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:05.777040005 CET	56930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.777194977 CET	56930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:05.777209044 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.159713984 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.160850048 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.160933018 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.161636114 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.161689997 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.406984091 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.407031059 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.407068968 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.407161951 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.407236099 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.407278061 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.407335997 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.511796951 CET	443	56927	142.250.186.164	192.168.2.5
Nov 16, 2024 16:45:06.512743950 CET	56927	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:45:06.512809038 CET	443	56927	142.250.186.164	192.168.2.5
Nov 16, 2024 16:45:06.513225079 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.513978004 CET	56929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.514008999 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.514393091 CET	443	56927	142.250.186.164	192.168.2.5
Nov 16, 2024 16:45:06.514624119 CET	56929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.514636993 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.515028000 CET	56927	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:45:06.515197039 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.515533924 CET	443	56927	142.250.186.164	192.168.2.5
Nov 16, 2024 16:45:06.515578985 CET	56930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.515603065 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.516060114 CET	56930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.516066074 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.523988008 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.524080038 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.524106026 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.524185896 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.524413109 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.524462938 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.524511099 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.524539948 CET	56925	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.524555922 CET	443	56925	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.524666071 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.525121927 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.525151014 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.525710106 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.525717020 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.528440952 CET	56931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.528507948 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.528733015 CET	56931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.528801918 CET	56931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.528816938 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.564435005 CET	56927	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:45:06.566832066 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.567595959 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.567626953 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.568139076 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.568157911 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.646800041 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.646873951 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.647073984 CET	56929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.647224903 CET	56929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.647224903 CET	56929	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.647270918 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.647299051 CET	443	56929	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.650496006 CET	56932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.650542974 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.650865078 CET	56932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.650865078 CET	56932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.650935888 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.694577932 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.694654942 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.694776058 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.694849014 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.694849968 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.694960117 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.694981098 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.694998026 CET	56926	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.695005894 CET	443	56926	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.697756052 CET	56933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.697843075 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.697941065 CET	56933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.698077917 CET	56933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.698120117 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.698875904 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.698932886 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.698985100 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.699012041 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.699054956 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.699099064 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.699120998 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.699134111 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.699134111 CET	56928	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.699141026 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.699146986 CET	443	56928	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.701431990 CET	56934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.701482058 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.701555014 CET	56934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.701688051 CET	56934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.701708078 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.806502104 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.806569099 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.806742907 CET	56930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.807060003 CET	56930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.807060003 CET	56930	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.807080984 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.807092905 CET	443	56930	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.810333967 CET	56935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.810435057 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:06.810527086 CET	56935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.810725927 CET	56935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:06.810749054 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.277539968 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.278306961 CET	56931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.278326988 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.278789043 CET	56931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.278795004 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.393558979 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.394563913 CET	56932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.394610882 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.394932032 CET	56932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.394959927 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.407557011 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.407638073 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.407742023 CET	56931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.408200026 CET	56931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.408200979 CET	56931	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.408243895 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.408272028 CET	443	56931	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.411478043 CET	56936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.411569118 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.411786079 CET	56936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.411895037 CET	56936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.411916971 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.436722994 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.437294006 CET	56933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.437329054 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.437829018 CET	56933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.437835932 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.446997881 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.447586060 CET	56934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.447604895 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.447973013 CET	56934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.447978973 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.522984028 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.523077011 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.523353100 CET	56932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.523566008 CET	56932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.523566008 CET	56932	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.523586035 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.523601055 CET	443	56932	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.527235031 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.527272940 CET	443	56937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.527501106 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.527621031 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.527636051 CET	443	56937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.566858053 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.566930056 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.567042112 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.567126989 CET	56933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.567126989 CET	56933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.567178011 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.567219019 CET	56933	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.567228079 CET	443	56933	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.585113049 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.585270882 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.585333109 CET	56934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.585361004 CET	56934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.585374117 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.585388899 CET	56934	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.585395098 CET	443	56934	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.872011900 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.872688055 CET	56935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.872775078 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:07.873337030 CET	56935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:07.873354912 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.057163954 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.057240963 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.057523012 CET	56935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.057621002 CET	56935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.057621002 CET	56935	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.057667017 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.057696104 CET	443	56935	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.158782005 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.159406900 CET	56936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.159477949 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.159869909 CET	56936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.159883976 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.278047085 CET	443	56937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.278728962 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.278765917 CET	443	56937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.279267073 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.279273987 CET	443	56937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.293771982 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.293840885 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.294013023 CET	56936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.294130087 CET	56936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.294130087 CET	56936	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.294172049 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.294198036 CET	443	56936	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.406253099 CET	443	56937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.406631947 CET	443	56937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:08.406876087 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.406876087 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.406876087 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.720781088 CET	56937	443	192.168.2.5	13.107.246.45
Nov 16, 2024 16:45:08.720810890 CET	443	56937	13.107.246.45	192.168.2.5
Nov 16, 2024 16:45:16.511827946 CET	443	56927	142.250.186.164	192.168.2.5
Nov 16, 2024 16:45:16.512000084 CET	443	56927	142.250.186.164	192.168.2.5
Nov 16, 2024 16:45:16.512089014 CET	56927	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:45:16.676532984 CET	56927	443	192.168.2.5	142.250.186.164
Nov 16, 2024 16:45:16.676628113 CET	443	56927	142.250.186.164	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 16, 2024 16:44:01.520514965 CET	53	51233	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:01.599836111 CET	53	49345	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:01.695338964 CET	61131	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:44:01.695512056 CET	64815	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:44:01.702713013 CET	53	61131	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:01.790465117 CET	53	64815	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:02.971782923 CET	53	65436	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:03.068500042 CET	56032	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:44:03.068794012 CET	59179	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:44:03.165077925 CET	53	59179	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:03.176944971 CET	53	56032	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:05.262598038 CET	53	57614	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:05.579077959 CET	62279	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:44:05.579627037 CET	51513	53	192.168.2.5	1.1.1.1
Nov 16, 2024 16:44:05.586390018 CET	53	62279	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:05.586694956 CET	53	51513	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:19.955521107 CET	53	53569	1.1.1.1	192.168.2.5
Nov 16, 2024 16:44:38.916518927 CET	53	56640	1.1.1.1	192.168.2.5
Nov 16, 2024 16:45:01.253258944 CET	53	58874	1.1.1.1	192.168.2.5
Nov 16, 2024 16:45:01.854433060 CET	53	51391	1.1.1.1	192.168.2.5
Nov 16, 2024 16:45:03.837038040 CET	53	50767	1.1.1.1	192.168.2.5
Nov 16, 2024 16:45:31.792376995 CET	53	64470	1.1.1.1	192.168.2.5
Nov 16, 2024 16:46:03.466850996 CET	53	53392	1.1.1.1	192.168.2.5
Nov 16, 2024 16:46:17.824359894 CET	53	60995	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 16, 2024 16:44:01.790554047 CET	192.168.2.5	1.1.1.1	c222	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 16, 2024 16:44:01.695338964 CET	192.168.2.5	1.1.1.1	0x4749	Standard query (0)	winaero.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 16:44:01.695512056 CET	192.168.2.5	1.1.1.1	0xf78d	Standard query (0)	winaero.com	65	IN (0x0001)	false
Nov 16, 2024 16:44:03.068500042 CET	192.168.2.5	1.1.1.1	0x2332	Standard query (0)	winaero.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 16:44:03.068794012 CET	192.168.2.5	1.1.1.1	0x456b	Standard query (0)	winaero.com	65	IN (0x0001)	false
Nov 16, 2024 16:44:05.579077959 CET	192.168.2.5	1.1.1.1	0x982f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 16:44:05.579627037 CET	192.168.2.5	1.1.1.1	0xdf0	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 16, 2024 16:44:01.702713013 CET	1.1.1.1	192.168.2.5	0x4749	No error (0)	winaero.com	68.183.112.81	A (IP address)	IN (0x0001)	false
Nov 16, 2024 16:44:03.176944971 CET	1.1.1.1	192.168.2.5	0x2332	No error (0)	winaero.com	68.183.112.81	A (IP address)	IN (0x0001)	false
Nov 16, 2024 16:44:05.586390018 CET	1.1.1.1	192.168.2.5	0x982f	No error (0)	www.google.com	142.250.186.164	A (IP address)	IN (0x0001)	false
Nov 16, 2024 16:44:05.586694956 CET	1.1.1.1	192.168.2.5	0xdf0	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

winaero.com

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	68.183.112.81	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:02 UTC	582	OUT	GET /blog/wp-content/uploads/2016/05/build-10158.png HTTP/1.1 Host: winaero.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 15:44:03 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 16 Nov 2024 15:44:02 GMT Content-Type: image/png Content-Length: 7584 Last-Modified: Sat, 28 May 2016 14:51:48 GMT Connection: close ETag: "5749b084-1da0" Expires: Sat, 16 Nov 2024 15:44:01 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=15768000 Accept-Ranges: bytes
2024-11-16 15:44:03 UTC	7584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 1d 52 49 44 41 54 78 da ed 5d 4b 8c 65 d7 55 dd 55 5d 76 07 75 bb 69 07 c9 4a 83 64 1c c4 c0 04 45 74 23 21 84 70 a4 b6 c5 10 c5 49 26 01 65 d2 99 10 48 06 21 83 84 64 84 23 45 4c 71 a4 48 64 96 0e 30 b7 8d 19 62 d2 0a 03 04 93 ee 78 14 31 f0 0f 85 04 45 0e ed ee fa bf 7a 6f 73 ef eb fa bc ba ef 9c b3 f7 3e bf 7b df bb 6b 49 d5 55 5d ef 5b ef de bd ce 5e eb ec bd ef 06 33 13 00 00 e3 c4 26 3e 02 00 00 01 00 00 00 02 00 00 00 04 00 00 00 08 00 00 00 10 00 00 00 20 00 00 00 40 00 00 00 80 00 00 00 00 01 00 00 00 02 00 00 00 04 00 00 00 08 00 00 00 10 00 00 00 20 00 00 00 40 00 00 00 80 00 00 Data Ascii: PNGIHDR\rfpHYs~RIDATx]KeUU]vuiJdEt#!pI&eH!d#ELqHd0bx1Ezos>{kIU][^3&> @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	68.183.112.81	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:03 UTC	382	OUT	GET /blog/wp-content/uploads/2016/05/build-10158.png HTTP/1.1 Host: winaero.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 15:44:04 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 16 Nov 2024 15:44:03 GMT Content-Type: image/png Content-Length: 7584 Last-Modified: Sat, 28 May 2016 14:51:48 GMT Connection: close ETag: "5749b084-1da0" Expires: Sat, 16 Nov 2024 15:44:02 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=15768000 Accept-Ranges: bytes
2024-11-16 15:44:04 UTC	7584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 1d 52 49 44 41 54 78 da ed 5d 4b 8c 65 d7 55 dd 55 5d 76 07 75 bb 69 07 c9 4a 83 64 1c c4 c0 04 45 74 23 21 84 70 a4 b6 c5 10 c5 49 26 01 65 d2 99 10 48 06 21 83 84 64 84 23 45 4c 71 a4 48 64 96 0e 30 b7 8d 19 62 d2 0a 03 04 93 ee 78 14 31 f0 0f 85 04 45 0e ed ee fa bf 7a 6f 73 ef eb fa bc ba ef 9c b3 f7 3e bf 7b df bb 6b 49 d5 55 5d ef 5b ef de bd ce 5e eb ec bd ef 06 33 13 00 00 e3 c4 26 3e 02 00 00 01 00 00 00 02 00 00 00 04 00 00 00 08 00 00 00 10 00 00 00 20 00 00 00 40 00 00 00 80 00 00 00 00 01 00 00 00 02 00 00 00 04 00 00 00 08 00 00 00 10 00 00 00 20 00 00 00 40 00 00 00 80 00 00 Data Ascii: PNGIHDR\rfpHYs~RIDATx]KeUU]vuiJdEt#!pI&eH!d#ELqHd0bx1Ezos>{kIU][^3&> @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-16 15:44:07 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=90082 Date: Sat, 16 Nov 2024 15:44:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49718	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:08 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-16 15:44:09 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=90094 Date: Sat, 16 Nov 2024 15:44:08 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-16 15:44:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:15 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=x9wyOBKU52cnx71&MD=ygh4R1yT HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-16 15:44:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 15b479d6-2278-4905-b5c7-9bba4d301ff3 MS-RequestId: bde0225d-e20e-4d1f-9e8b-bff74cd011c0 MS-CV: xCUps4teqUG8JK1Q.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 16 Nov 2024 15:44:14 GMT Connection: close Content-Length: 24490
2024-11-16 15:44:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-16 15:44:15 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:16 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:16 UTC	492	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:16 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 15 Nov 2024 16:53:09 GMT ETag: "0x8DD0595FBE5245A" x-ms-request-id: 46f8cbee-b01e-0053-74a3-37cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154416Z-1866b5c5fbb55pxzhC1DFW1aps0000000330000000001wzc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:16 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-16 15:44:16 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:18 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:18 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 31be6f69-e01e-00aa-387f-37ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154418Z-1866b5c5fbbwmdwxhC1DFW5fbn00000000gg000000005p6y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:18 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6c84f393-101e-007a-65a5-36047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154417Z-16547b76f7fpdsp9hC1DFW8f5000000000e0000000009b1k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:17 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:18 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 57a2975a-501e-0078-749b-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154418Z-16547b76f7fkf5v9hC1DFW2y5s00000002s000000000n4s5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:18 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:17 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:18 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: e7102de9-901e-0029-7d09-37274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154418Z-1866b5c5fbbvz6qbhC1DFWsyms0000000280000000004yup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:18 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:18 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:18 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 93eb20e0-b01e-0021-689b-37cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154418Z-164f84587bfdt5l2hC1DFW88gs00000001e0000000000bpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:18 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:19 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: ad5ef595-c01e-0082-42a3-34af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154419Z-164f84587bfs5tz9hC1DFW9a3w000000033g000000007gr5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:19 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:18 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: fc33b24f-c01e-00a2-3209-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154419Z-1866b5c5fbbzzh8chC1DFWdrc400000002m000000000cgkr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:18 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 6cd7b429-001e-0034-76a2-37dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154419Z-164f84587bfm8kdnhC1DFWey4g000000030g00000000f2v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:18 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 9262989a-201e-0096-39af-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154419Z-1866b5c5fbbkcpv2hC1DFWf1yc000000035g000000001h0x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:19 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:19 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 26f02031-c01e-0046-42fb-362db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154419Z-164f84587bfsgfx9hC1DFWw1as00000002t000000000g9np x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:19 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:20 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:20 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a09399d2-801e-0015-5284-37f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154420Z-164f84587bfmxxfphC1DFW3au800000001k0000000000u1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:20 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 5d8d4d17-101e-007a-18d2-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154420Z-16547b76f7fffb7lhC1DFWdsxg000000035000000000au8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:20 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:20 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 30929569-101e-008d-79ff-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154420Z-16547b76f7f2b5qzhC1DFWeag4000000018g000000004h7z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:20 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 4cebb1d6-301e-0099-6509-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154420Z-16547b76f7f9s8x7hC1DFWywrg00000002sg00000000bhxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:20 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:20 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 7d8b8a82-001e-0066-1ad2-37561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154420Z-16547b76f7f5b5tthC1DFWuk8400000001r0000000000t7w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:20 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:21 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 09c62b6e-c01e-002b-7879-376e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154421Z-164f84587bffvwt9hC1DFW2ktw00000000p000000000ff2p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:20 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 1749ec84-b01e-0001-2ec6-3746e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154421Z-1866b5c5fbbmvj59hC1DFW9pp400000000m000000000g9em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:20 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 06b7652e-701e-000d-4eaf-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154420Z-16547b76f7fd4rc5hC1DFWkzhw00000003ag000000006eab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:21 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:21 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: e43e0d6e-f01e-0099-649d-379171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154421Z-16547b76f7fbkfmzhC1DFWm9tw00000002pg0000000069r8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:21 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:21 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: df51c808-401e-0047-74b1-378597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154421Z-1866b5c5fbbkcpv2hC1DFWf1yc000000034g000000003wu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:21 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 849cffad-401e-008c-4c40-3686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154421Z-1866b5c5fbb2ngs6hC1DFW402w000000016g00000000am7f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:21 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 3ed4fa9a-c01e-000b-399a-37e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154421Z-16547b76f7fffb7lhC1DFWdsxg000000033000000000gtss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:21 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 6e95107e-e01e-0099-2a9b-37da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154421Z-16547b76f7ftfv4jhC1DFWuhug00000000fg000000009bc5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:22 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 27141677-f01e-003c-23af-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154422Z-1866b5c5fbb2t6txhC1DFWa2qc00000002zg00000000awdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:22 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:22 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:22 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: d36f9ca3-a01e-0021-21af-36814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154422Z-16547b76f7fqqjnnhC1DFWxv7400000001cg000000002567 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:22 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:22 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6900d7da-401e-00ac-4ed2-370a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154423Z-16547b76f7ftnm6xhC1DFW9c8c00000002m000000000b6b8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:22 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:22 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 2028dee8-601e-0097-4b81-37f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154422Z-16547b76f7f5b5tthC1DFWuk8400000001g000000000nayu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:23 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:22 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: fa408a18-501e-0064-15b8-371f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154423Z-16547b76f7f67wxlhC1DFWah9w0000000pqg00000000kxeb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:23 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 30a84257-201e-006e-3afb-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154423Z-16547b76f7fw2955hC1DFWsptc00000003cg00000000hxhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:23 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:23 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a0c6f192-101e-007a-2f09-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154423Z-16547b76f7fnlq8chC1DFWxnen00000002t0000000002e4y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:23 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:23 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:23 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 15e9ab73-801e-0047-76bb-377265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154423Z-1866b5c5fbbmvj59hC1DFW9pp400000000n000000000fpak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:23 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:23 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: a0d12520-501e-0029-67fa-36d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154423Z-164f84587bfmxxfphC1DFW3au800000001eg000000008tws x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:23 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 8a4e7403-501e-0047-0c09-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154423Z-16547b76f7fffb7lhC1DFWdsxg000000035g000000009nzd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:23 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a9c4265b-101e-000b-57af-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154423Z-16547b76f7fw2955hC1DFWsptc00000003h0000000006zxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:24 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:24 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:24 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 3a72ea48-301e-001f-4fd2-37aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154424Z-1866b5c5fbbwlv6nhC1DFWw4bs00000001c000000000dhqz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:24 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:24 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:24 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:24 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: cb83de39-501e-000a-5d97-370180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154424Z-164f84587bf7k72dhC1DFWvczs00000002xg00000000eg3x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 15:44:24 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:24 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 140e2611-e01e-003c-3f87-36c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154424Z-164f84587bf28gjzhC1DFW35kg00000002v000000000g1nu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:24 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0304051c-b01e-0070-43af-361cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154424Z-16547b76f7fqqjnnhC1DFWxv74000000016g00000000knvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:25 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:25 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 7b112b71-901e-005b-73c6-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154425Z-16547b76f7ffx24hhC1DFW9px400000002eg00000000k743 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:25 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:25 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:25 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 86e20b26-901e-00a0-18ab-366a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154425Z-1866b5c5fbb5hnj5hC1DFW18sc000000034000000000bsv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:25 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:25 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 316038b9-a01e-006f-2591-3713cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154425Z-16547b76f7fgfpmjhC1DFWw6ec00000002e000000000a7vc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:25 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:25 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: de79bc98-401e-0064-1e9b-3754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154425Z-1866b5c5fbb7lvschC1DFW4rm000000002w000000000mk2t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:25 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:25 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:25 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0fe31a08-b01e-001e-2cae-360214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154425Z-1866b5c5fbb2ngs6hC1DFW402w000000016000000000c4vp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:25 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:26 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:26 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d2131438-301e-006e-59dc-37f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154426Z-164f84587bffvwt9hC1DFW2ktw00000000q000000000cv0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:26 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:26 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7f17f6e1-501e-00a3-5daf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154426Z-16547b76f7fz92z5hC1DFWmdx8000000019g000000009b33 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:26 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:26 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4f50471b-101e-0079-73af-365913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154426Z-16547b76f7fbkfmzhC1DFWm9tw00000002g000000000ny61 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:26 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: bdecc517-a01e-0050-3dc0-37db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154426Z-16547b76f7fhv4d5hC1DFW7h0n00000001cg000000007bgr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:26 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 885b02a2-801e-0035-1509-37752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154426Z-1866b5c5fbbfkdfghC1DFW4sv4000000022g00000000adsg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:27 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 4dbbda22-e01e-0033-5212-374695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154427Z-164f84587bfsqsthhC1DFWh630000000021000000000fb9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:27 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:27 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 5823ae44-501e-0078-6fcd-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154427Z-16547b76f7fl5zvnhC1DFWtk9g00000001c000000000ervb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 15:44:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:27 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 763850b9-e01e-0071-4d09-3708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154427Z-1866b5c5fbbmvj59hC1DFW9pp400000000sg00000000698r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:27 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 33178deb-401e-0048-6eb6-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154427Z-16547b76f7fw2955hC1DFWsptc00000003g0000000009pg6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:27 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: b85626fa-d01e-0017-75bb-37b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154427Z-1866b5c5fbbt75vghC1DFW0qd400000002z0000000004ke3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:28 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:28 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1572e0e4-b01e-003e-1a0c-2d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154428Z-16547b76f7fgfpmjhC1DFWw6ec00000002hg000000001824 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:28 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:28 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9ba9b484-c01e-00ad-5d7f-37a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154428Z-16547b76f7f67wxlhC1DFWah9w0000000ptg00000000c5wp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:28 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:28 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ba15ece-101e-0034-5d08-2c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154428Z-16547b76f7fx6rhxhC1DFW76kg0000000pu000000000ary2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:28 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:28 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:28 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: bbf47203-201e-003f-3a8e-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154428Z-16547b76f7fwggrphC1DFW2a8s00000001t000000000k440 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:28 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:28 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 57b0571f-501e-00a3-7dfb-2cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154428Z-16547b76f7fffb7lhC1DFWdsxg00000003800000000038vt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:29 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f3ae074e-d01e-0082-62af-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154429Z-16547b76f7ftfv4jhC1DFWuhug00000000f0000000009bby x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:29 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:29 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b301b02c-001e-0014-179f-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154429Z-16547b76f7ffx24hhC1DFW9px400000002ng000000001qna x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:29 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:29 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154429Z-16547b76f7ftnm6xhC1DFW9c8c00000002g000000000k13a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:29 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:29 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 9af16547-401e-0015-3f09-370e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154429Z-1866b5c5fbbzzh8chC1DFWdrc400000002r0000000004sq3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:29 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 767d9fc8-d01e-007a-76a1-36f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154429Z-164f84587bf7jb9dhC1DFWkay400000002gg00000000gz2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:30 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:30 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:30 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: da73b1ea-a01e-0070-5573-35573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154430Z-16547b76f7fqqjnnhC1DFWxv7400000001c0000000003bwp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:30 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:30 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 86fb44b9-501e-0078-06d2-2c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154430Z-16547b76f7f64d6whC1DFWf9vn00000001p0000000003nwg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:30 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:30 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: d0d1667b-a01e-000d-1d09-37d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154430Z-16547b76f7ff9zf4hC1DFW2pfc00000000g0000000008xb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:30 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:30 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:30 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 6b1971c7-b01e-0053-1140-36cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154430Z-16547b76f7fht2hfhC1DFWbngg000000039000000000ka9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:30 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:30 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:30 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:30 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 90f07e84-d01e-0028-2a09-377896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154430Z-16547b76f7fkf5v9hC1DFW2y5s00000002y0000000004yxh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:30 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:31 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 32d33ebf-401e-0048-7d9e-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154431Z-16547b76f7fpdsp9hC1DFW8f5000000000f00000000099u7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:31 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:31 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:31 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3592d30c-801e-0048-183e-38f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154431Z-164f84587bfh9nvdhC1DFWmce000000000wg00000000bw4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-16 15:44:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:31 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:31 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb03e2b-001e-00ad-2bc4-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154431Z-1866b5c5fbbldb6rhC1DFW4bew000000035000000000dmtt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:31 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:31 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:31 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 4d38b348-201e-006e-4a3e-38bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154431Z-164f84587bfrrmqdhC1DFWvu6s00000001n00000000091bu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-16 15:44:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:31 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:31 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 28ec3a41-801e-00a0-70af-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154431Z-16547b76f7fmbrhqhC1DFWkds80000000pzg000000000yn2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:32 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:32 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:32 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: e1a3adfd-c01e-00a1-203d-387e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154432Z-164f84587bfr8hdmhC1DFWt5nc000000015g00000000cwgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:32 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:32 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:32 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:32 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 0e6654d1-b01e-0097-46c4-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154432Z-16547b76f7fhv4d5hC1DFW7h0n00000001dg0000000052ek x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:32 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:32 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:32 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:32 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154432Z-1866b5c5fbbfkdfghC1DFW4sv40000000250000000004xsc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:32 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:32 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:32 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:32 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 11343522-e01e-0085-0240-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154432Z-1866b5c5fbb2ngs6hC1DFW402w000000014000000000fpvv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:32 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:32 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 92b50986-201e-000c-1a26-3779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154432Z-164f84587bfbvgrghC1DFWbs7w00000002v000000000hfrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:33 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:33 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:33 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: eda1c5d7-201e-0033-2eb8-37b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154433Z-16547b76f7fz92z5hC1DFWmdx800000001b0000000005q98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:33 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:33 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:33 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:33 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 152871bd-d01e-002b-2382-3725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154433Z-16547b76f7fbkfmzhC1DFWm9tw00000002r00000000028nz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:33 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:33 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:33 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: ae8c5328-c01e-0034-77cb-362af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154433Z-164f84587bfjxw6fhC1DFWq9440000000380000000000ef5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:33 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:33 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:33 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: dd43ea10-201e-0003-39d2-37f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154433Z-16547b76f7fk9g8vhC1DFW825400000003u0000000004x92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:33 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:33 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:33 UTC	495	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:33 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: d6bfd382-901e-00ac-633e-38b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154433Z-164f84587bfjxw6fhC1DFWq944000000034000000000avkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-16 15:44:33 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:34 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:34 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:34 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 55235507-801e-0015-17af-36f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154434Z-1866b5c5fbbzzh8chC1DFWdrc400000002hg00000000h36t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:34 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:34 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:34 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:34 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: cd078e55-e01e-0020-52a2-37de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154434Z-164f84587bfdt5l2hC1DFW88gs000000018g00000000e9c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:34 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:34 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:34 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:34 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 970a151a-f01e-003f-26c9-36d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154434Z-164f84587bfm8kdnhC1DFWey4g000000032g00000000b68y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:34 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:34 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:34 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:34 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 0f1e6da1-801e-007b-6baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154434Z-16547b76f7f7zzl8hC1DFWmtag00000001yg000000004bx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:34 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:34 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:34 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 49ec1b51-d01e-00ad-4caf-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154434Z-16547b76f7fgfpmjhC1DFWw6ec00000002c000000000g89k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:35 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:36 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:36 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:36 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 9c6f226a-f01e-003f-6009-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154436Z-16547b76f7fgfpmjhC1DFWw6ec00000002eg00000000a2ar x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:36 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:36 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:36 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:36 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cf21543a-c01e-0079-7409-37e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154436Z-16547b76f7fl5zvnhC1DFWtk9g00000001f0000000005td6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:36 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:36 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:36 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:36 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 42a4478f-a01e-0032-2706-371949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154436Z-164f84587bfrrmqdhC1DFWvu6s00000001gg00000000gfnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:36 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:36 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:36 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:36 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c22da945-001e-00ad-15a1-36554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154436Z-1866b5c5fbb2t6txhC1DFWa2qc0000000330000000002c2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:36 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:36 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:36 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:36 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 969097d6-001e-0046-4dc6-37da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154436Z-1866b5c5fbbfkdfghC1DFW4sv4000000022g00000000ae3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:36 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:36 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:37 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 93dd010c-d01e-0014-6aab-36ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-16547b76f7fl5zvnhC1DFWtk9g00000001gg00000000206u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:37 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:37 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:37 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: cc141125-801e-0067-1cd2-37fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-16547b76f7fhv4d5hC1DFW7h0n00000001b000000000beaw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:37 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:37 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:37 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: a94ee65e-c01e-007a-7daf-36b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-16547b76f7ff9zf4hC1DFW2pfc00000000e0000000009rg3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:37 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:37 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:37 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 25df3dc6-101e-000b-2cf8-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-164f84587bftbpb6hC1DFWm4kg00000001p000000000kuaq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:37 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:37 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:37 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: fffac850-701e-0098-3309-37395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-16547b76f7fqqjnnhC1DFWxv74000000018g00000000errk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:37 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:37 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 70ecc3c7-201e-005d-13af-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-16547b76f7ftfv4jhC1DFWuhug00000000hg000000009yyr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:37 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:38 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 43e62ce9-c01e-00a1-039c-377e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-1866b5c5fbbwmdwxhC1DFW5fbn00000000fg0000000048cn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:38 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:37 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 1aad4a78-401e-0047-64a8-368597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-1866b5c5fbbzzh8chC1DFWdrc400000002n000000000bp7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:38 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:37 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:37 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: d62d9096-801e-0048-06af-36f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154437Z-16547b76f7fkf5v9hC1DFW2y5s00000002z0000000001e2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:38 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:38 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:38 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: bd00a7b8-901e-002a-72af-367a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154438Z-16547b76f7fqqjnnhC1DFWxv74000000018g00000000ersz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:38 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:38 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:38 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:38 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 10622547-201e-0085-529f-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154438Z-16547b76f7ff9zf4hC1DFW2pfc00000000gg000000009e7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:38 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:38 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:38 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 15349be3-801e-0047-5579-377265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154438Z-164f84587bf6n6jwhC1DFW90fn000000024g00000000e633 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:38 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:38 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:38 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:38 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e3d9936e-401e-0083-0609-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154438Z-16547b76f7fsq6p7hC1DFWfx6800000001c000000000g2zf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:38 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:38 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:38 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:38 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: e3d993a2-401e-0083-2409-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154438Z-16547b76f7fqqjnnhC1DFWxv74000000017000000000m576 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:38 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:39 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:39 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:39 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e00571ae-f01e-0052-6cd2-379224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154439Z-16547b76f7fffb7lhC1DFWdsxg000000035000000000avm5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:39 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:39 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:39 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:39 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 926299b0-201e-0096-47af-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154439Z-16547b76f7fbkfmzhC1DFWm9tw00000002qg000000004081 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:39 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:39 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:39 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 14be5296-801e-008c-31af-367130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154439Z-1866b5c5fbbwlv6nhC1DFWw4bs00000001d000000000cvz4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:39 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:39 UTC	538	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:39 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 29f76c25-201e-0000-6fd2-2ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154439Z-16547b76f7fx6rhxhC1DFW76kg0000000pw0000000005gxd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:39 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:40 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:40 UTC	538	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:40 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 59bb3ce9-601e-0097-63c3-2bf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154440Z-16547b76f7f67wxlhC1DFWah9w0000000pq000000000mbuz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:40 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:40 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:40 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: f96acd97-a01e-000d-6d86-36d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154440Z-164f84587bf7jb9dhC1DFWkay400000002mg00000000czd4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:40 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:40 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bb729275-001e-0014-2109-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154440Z-16547b76f7ftnm6xhC1DFW9c8c00000002n0000000007q3y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:40 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:40 UTC	538	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 1deecc73-401e-0029-32d2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154440Z-16547b76f7fgfpmjhC1DFWw6ec00000002dg00000000c5ke x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:40 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:40 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 2374d1b0-301e-0020-6d09-376299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154440Z-16547b76f7fmcv27hC1DFWgpcg00000001u0000000007ck7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:41 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:41 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: bdfc7973-a01e-0050-44c4-37db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154441Z-1866b5c5fbbz7hb5hC1DFWru7c00000002v000000000dzme x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:41 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:41 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: ccbc10da-001e-0049-41a5-365bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154441Z-1866b5c5fbbqmbqjhC1DFWwgvc00000002n00000000024nf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:41 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:41 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:41 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 454d907e-001e-00ad-0609-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154441Z-1866b5c5fbb55pxzhC1DFW1aps0000000310000000005m9g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:41 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:41 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:41 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: e670145d-b01e-003d-3cc7-36d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154441Z-164f84587bfsgfx9hC1DFWw1as00000002xg000000006yx5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:42 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:42 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:42 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 7a5959cf-b01e-0097-4ca5-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154442Z-1866b5c5fbbwmdwxhC1DFW5fbn00000000m0000000004f95 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:42 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:42 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:42 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:42 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 145694f3-701e-000d-397a-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154442Z-164f84587bfdfkt7hC1DFW4fas0000000110000000008e6m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:42 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:42 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:42 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:42 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 24bee092-d01e-0028-6965-367896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154442Z-164f84587bf28gjzhC1DFW35kg000000031g0000000011de x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:42 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:42 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:42 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 4da461bd-e01e-0033-7a09-374695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154442Z-16547b76f7fl5zvnhC1DFWtk9g00000001cg00000000ctgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:42 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:42 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:42 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:42 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 5d2bddd1-201e-006e-8040-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154442Z-16547b76f7fljddfhC1DFWeqbs00000003tg00000000c8p2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:42 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:42 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:43 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:42 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 1f9037d9-f01e-00aa-639b-378521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154442Z-164f84587bfdt5l2hC1DFW88gs00000001e0000000000cpx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:43 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:43 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:43 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:43 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: fe042a41-f01e-0003-03af-364453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154443Z-16547b76f7fljddfhC1DFWeqbs00000003s000000000kkye x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:43 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:43 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:43 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:43 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 929893a7-101e-0017-74a6-3747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154443Z-16547b76f7f9s8x7hC1DFWywrg00000002u0000000008a4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:43 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:43 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:43 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:43 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: cbfe6fba-701e-0053-2775-373a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154443Z-16547b76f7ftfv4jhC1DFWuhug00000000mg000000009kxs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:43 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:43 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:43 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a49de474-501e-007b-59ae-375ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154443Z-16547b76f7f67wxlhC1DFWah9w0000000pxg000000000muz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:43 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:43 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 7b0cde1b-901e-005b-3fc4-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154443Z-16547b76f7fqqjnnhC1DFWxv74000000018000000000f4zr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:43 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:44 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:44 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: a147f6b5-501e-0029-4426-37d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154444Z-164f84587bf28gjzhC1DFW35kg00000002vg00000000f8zb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:44 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:44 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:44 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:44 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 78bc729c-601e-0070-22ad-37a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154444Z-164f84587bfmxxfphC1DFW3au800000001f00000000089p9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 15:44:44 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:44 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:44 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:44 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: ecab8261-801e-00a3-2dbb-377cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154444Z-16547b76f7fffb7lhC1DFWdsxg0000000370000000006bc1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:44 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:44 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:44 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:44 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: e612f54f-b01e-003d-2faf-36d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154444Z-16547b76f7ftnm6xhC1DFW9c8c00000002h000000000fu2c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:44 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:44 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:44 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:44 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: f87a9289-e01e-0099-41af-36da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154444Z-16547b76f7fw2955hC1DFWsptc00000003g0000000009q3s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:44 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:44 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:44 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:44 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 7ec4188a-901e-0064-38b1-37e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154444Z-164f84587bfdt5l2hC1DFW88gs000000019000000000c9mc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:44 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:44 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:45 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:44 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 86712c9d-c01e-007a-5916-36b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154444Z-16547b76f7fzwxm2hC1DFWt5hw00000000mg0000000083q6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:45 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:44 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:45 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:44 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 7d63e96f-001e-0066-39c4-37561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154444Z-16547b76f7ff9zf4hC1DFW2pfc00000000m0000000008v9k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:45 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:45 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:45 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:45 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: ae9eba13-f01e-00aa-01cb-378521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154445Z-164f84587bf9nk94hC1DFWerbg00000001y000000000e07y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:45 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:45 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:45 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:45 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: ce35fbe0-201e-003c-587e-3730f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154445Z-164f84587bfdt5l2hC1DFW88gs00000001b000000000866p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:45 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:45 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:45 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:45 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: dcc08284-201e-003c-5a12-3730f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154445Z-164f84587bffvwt9hC1DFW2ktw00000000t0000000005tv5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:45 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:45 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:45 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:45 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 0abb82d1-e01e-0051-6c09-3784b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154445Z-1866b5c5fbbkcpv2hC1DFWf1yc000000031g00000000a0pm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:45 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 15:44:45 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 15:44:45 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 15:44:45 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 9c6f40ea-f01e-003f-4609-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T154445Z-1866b5c5fbbpxkkxhC1DFWhvmc00000003b00000000043hc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 15:44:45 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3060, Parent PID: 5316

General

Target ID:	0
Start time:	10:43:56
Start date:	16/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\11sds_Invoice_9334749.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7132, Parent PID: 3060

General

Target ID:	2
Start time:	10:43:59
Start date:	16/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2224,i,12584006983949288172,8811238237139419842,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 11sds_Invoice_9334749.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1144760620\sets.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\Filtering Rules

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\LICENSE.txt

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_1572876562\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_171903710\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3060_628005874\_metadata\verified_contents.json

Windows Analysis Report
11sds_Invoice_9334749.html