Edit tour

Windows Analysis Report
https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9

Overview

General Information

Sample URL:	https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9
Analysis ID:	1560415
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2024,i,7424622979505011030,4121814623453497523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4775Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: no-storeContent-Length: 8062Content-Type: text/htmlX-Azure-ExternalError: 0x800705b4,DNSTimeoutX-MSEdge-Ref: Ref A: 208EE0BFC9924989B33F417C4BD49C49 Ref B: EWR311000103027 Ref C: 2024-11-21T18:33:51ZDate: Thu, 21 Nov 2024 18:33:54 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: no-storeContent-Length: 8062Content-Type: text/htmlX-Azure-ExternalError: 0x800705b4,DNSTimeoutX-MSEdge-Ref: Ref A: 5C857316CD9D4B3889AD46346F364143 Ref B: EWR311000107027 Ref C: 2024-11-21T18:33:56ZDate: Thu, 21 Nov 2024 18:33:58 GMTConnection: close

Source: chromecache_86.2.dr, chromecache_87.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_88.2.dr	String found in binary or memory: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/i
Source: chromecache_89.2.dr, chromecache_94.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_103.2.dr, chromecache_85.2.dr, chromecache_91.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-1.cdn.office.net
Source: chromecache_103.2.dr, chromecache_85.2.dr, chromecache_91.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25423.12016/require.js
Source: chromecache_103.2.dr, chromecache_85.2.dr, chromecache_91.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-11-08.003/
Source: chromecache_103.2.dr, chromecache_85.2.dr, chromecache_91.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2024-11-08.003/
Source: chromecache_103.2.dr, chromecache_85.2.dr, chromecache_91.2.dr, chromecache_88.2.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.126.53.21:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49921 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@16/41@14/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2024,i,7424622979505011030,4121814623453497523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2024,i,7424622979505011030,4121814623453497523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://chamberlinarchitects-my.sharepoint.com/_layouts/15/images/microsoft-logo.png	0%	Avira URL Cloud	safe
https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/i	0%	Avira URL Cloud	safe
https://chamberlinarchitects-my.sharepoint.com/ScriptResource.axd?d=2OhCo73OyGBsu9HtdNMGpaB4ebHC0Wow64z70vEbDX016Q4VYy1TsSAjEcPfwjaseGXT81I9NsCoei6l_F9oV_0TKm0mI3SFi913Q4UdnB0fu5rZPbviFP6dhENUHOrzrf1bzlfqe09JhEJ0uEBltljpPB6xlweZYnXjuc4KC4LTBWkTghrKgddl04vYmjrJ0&t=ffffffffb201fd3f	0%	Avira URL Cloud	safe
https://chamberlinarchitects-my.sharepoint.com/WebResource.axd?d=na8NtmOLcH2-PSkhg-2StciQu83Rz6wegHK-qpykqqPXu1zqQgXBjx-1wJcAzcBoT-1lZ2ky9il7sECAMuM_sInK5ihLxbGkxyJG0zE_XUg1&t=638637567397700854	0%	Avira URL Cloud	safe
https://chamberlinarchitects-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	0%	Avira URL Cloud	safe
https://chamberlinarchitects-my.sharepoint.com/ScriptResource.axd?d=0HLq5DZTTienD8-N_shQw5ZYxJ531YzNJKJqeNebSa9UGEpk7XrdNU5LZl1_olnoHu0CDe9ycImuoEn45XNJjmetCZzaU0o55XDr2ZFHoDvWflGWiVu47vTPmEwdlqv0sJ8G3ZXIwil1J7kRiztKx0uiY-1YgLb3JNPFVPoDEmw1&t=64bd211b	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	high
www.google.com	142.250.181.100	true	false	high
chamberlinarchitects-my.sharepoint.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	high
spo.nel.measure.office.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://chamberlinarchitects-my.sharepoint.com/_layouts/15/images/microsoft-logo.png	false	Avira URL Cloud: safe	unknown
https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	false		unknown
https://chamberlinarchitects-my.sharepoint.com/ScriptResource.axd?d=0HLq5DZTTienD8-N_shQw5ZYxJ531YzNJKJqeNebSa9UGEpk7XrdNU5LZl1_olnoHu0CDe9ycImuoEn45XNJjmetCZzaU0o55XDr2ZFHoDvWflGWiVu47vTPmEwdlqv0sJ8G3ZXIwil1J7kRiztKx0uiY-1YgLb3JNPFVPoDEmw1&t=64bd211b	false	Avira URL Cloud: safe	unknown
https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9	false		unknown
https://chamberlinarchitects-my.sharepoint.com/WebResource.axd?d=na8NtmOLcH2-PSkhg-2StciQu83Rz6wegHK-qpykqqPXu1zqQgXBjx-1wJcAzcBoT-1lZ2ky9il7sECAMuM_sInK5ihLxbGkxyJG0zE_XUg1&t=638637567397700854	false	Avira URL Cloud: safe	unknown
https://chamberlinarchitects-my.sharepoint.com/ScriptResource.axd?d=2OhCo73OyGBsu9HtdNMGpaB4ebHC0Wow64z70vEbDX016Q4VYy1TsSAjEcPfwjaseGXT81I9NsCoei6l_F9oV_0TKm0mI3SFi913Q4UdnB0fu5rZPbviFP6dhENUHOrzrf1bzlfqe09JhEJ0uEBltljpPB6xlweZYnXjuc4KC4LTBWkTghrKgddl04vYmjrJ0&t=ffffffffb201fd3f	false	Avira URL Cloud: safe	unknown
https://chamberlinarchitects-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://github.com/jrburke/requirejs	chromecache_86.2.dr, chromecache_87.2.dr	false		high
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js	chromecache_103.2.dr, chromecache_85.2.dr, chromecache_91.2.dr, chromecache_88.2.dr	false		high
https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/i	chromecache_88.2.dr	false	Avira URL Cloud: safe	unknown
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_89.2.dr, chromecache_94.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.138.10	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1560415
Start date and time:	2024-11-21 19:32:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@16/41@14/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 172.217.21.35, 172.217.17.46, 64.233.165.84, 199.232.210.172, 34.104.35.123, 95.101.23.104, 95.101.23.91, 2.16.149.13, 2.16.149.34, 216.58.208.234, 172.217.19.202, 142.250.181.106, 172.217.19.10, 172.217.19.170, 142.250.181.74, 172.217.19.234, 142.250.181.138, 172.217.17.74, 142.250.181.10, 172.217.17.42, 172.217.17.78, 172.217.17.67, 2.19.198.226, 2.19.198.243, 2.19.198.234, 104.126.37.201, 104.126.37.192, 104.126.37.225, 104.126.37.233, 104.126.37.210, 104.126.37.194
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, e40491.dscd.akamaiedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, res-1.cdn.office.net, a1894.dscb.akamai.net, fe3cr.delivery.mp.microsoft.com, 193587-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com, res-1.cdn.office.net-c.edgekey.net, res-1.cdn.office.net-c.edgekey.net.globalredir.akadns.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: https://chamberlinarchitects-my.sharepoint.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://chamberlinarchitects-my.sharepoint.com

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:33:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9791840942061896
Encrypted:	false
SSDEEP:	48:8Hd3Tv7fHbcidAKZdA19ehwiZUklqehTy+3:8Vvugy
MD5:	C7D66F2FDCAF7105DFDB1A0BAD2418E5
SHA1:	A86F346609ADEA0EB040609A42B44BE666627B48
SHA-256:	14C6C59AAEB77D58F96B90EEBF9079E0EE4BE6044A6CBF700A0ED140769344D0
SHA-512:	F408E79EB1D4591A4FFFD04B2692695D5E4DE8CDF5ACD8972D5BE46498113CF969A89A68599C8203160456A5034A41F84B90B9582144578CB64FCDE2F3A58D29
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x...C<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY6.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY6.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY6.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY6............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:33:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9937192534065873
Encrypted:	false
SSDEEP:	48:8Pd3Tv7fHbcidAKZdA1weh/iZUkAQkqehQy+2:89vs9Q5y
MD5:	F9D875B388C65B634CD4A39AC5AF2C26
SHA1:	B46E75EBEABB61F5B97466A19C7E0B42C5C4286B
SHA-256:	4604543F569506F840BD180A367956447EB2881D566B0CC50E7D6773DB79A48B
SHA-512:	12945F61C522AD7733572D603C2C312478574CBF532F1BC4C9D61C4643ADED2CBC017DB4AE987B3C43EB20843FCD41355B1CF7533FF5FE1A16C856516141A29B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........C<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY6.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY6.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY6.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY6............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00643816340772
Encrypted:	false
SSDEEP:	48:8x0d3Tv7sHbcidAKZdA14tseh7sFiZUkmgqeh7suy+BX:8x8vNnsy
MD5:	067883ED4F7B4EF249AC43B584078508
SHA1:	5D853B82B2CA15BEFA3F3814E37355F0F9CE4E70
SHA-256:	FE6B95F8AB1178BCE8E082645E5244DD83EE70E765AD07A8868A4426B479CE6A
SHA-512:	8995C6966E8FBF5928E75A1028E48DEB30F2F830EB6C1BAEC43C617E61CF87192F8BEFE43C6F17396840E1A6C0D8B3E163BFA35197588BD0FBD1F509560ACBE6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY6.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY6.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY6.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY6............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:33:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9946536961205834
Encrypted:	false
SSDEEP:	48:8md3Tv7fHbcidAKZdA1vehDiZUkwqehUy+R:8CvX2y
MD5:	3ED9BA7CB5B527ACE72EE64A839D42E3
SHA1:	0D910C1438101C68B0AC9F6CE4B15BD07E2F1A2B
SHA-256:	83A02D557A78CADC85A6096CEA85907AEEDBD50E00074D03AF9F52CCEFF76652
SHA-512:	0F805ADBDC8C92222F6F400C48430DD929F39E9E022697A46562A0037D5BE51B54FB4636BE2E6147392A95B0AD1EAFEF67936ABF9CED2D3DFB5DC0868C290B7B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......C<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY6.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY6.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY6.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY6............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:33:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9835051821592673
Encrypted:	false
SSDEEP:	48:8XXd3Tv7fHbcidAKZdA1hehBiZUk1W1qehqy+C:81vn9Ky
MD5:	EA88B65DF7DC36BDB1C33A42E02E2644
SHA1:	B3BF3216B3CC8842902A750852224A0215087BB4
SHA-256:	D7D7E6D85770DFDE91CE22ACAE2287F1A870D7775DD154D604882D75D91D7803
SHA-512:	69FC944D5C94D85A79AFBF41B638D99F9DE5AB7D4A794A635D88CBC141A9372B909B35BAED4982E1C841BD056BB1FF7DD6C5F7F1B79B64AD8C64DD8EBD6E89ED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?...C<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY6.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY6.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY6.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY6............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 17:33:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9895759498776435
Encrypted:	false
SSDEEP:	48:8ed3Tv7fHbcidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbsy+yT+:86vvT/TbxWOvTbsy7T
MD5:	028DD87B05249C686610251D3CFF69DC
SHA1:	E6589F57C0F4BFD115E8E6983AE5AF6BE4226174
SHA-256:	C8389C06EE5087D106A50085CB15BDF15E32131531C05EDE9198B48D6B6F4415
SHA-512:	709F47B65AAAF0DA6C450EB535C60586F04C622F29C35EE5AB07555CBD446CC98C059B99E7FBFC89D02C395C0602F193ACF16C579665F5C4D4E72A946EB9F9D4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....E..C<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY6.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY6.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY6.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY6............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	dropped
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/ScriptResource.axd?d=d7AbIk__RR4V2Rx-TSpCKncf6PRukCeYxPNMpbRrp5zNMOFlJr9oc120azlckqN7o7d4gwCiUibzXkmvkXeWZtF2fi6TTziQ1s-2mcuurtyAyZX48_rcdDBS704XVLDt2-erL9E_43IBz_4UGpgmsey82L8U81vqIBPBu5LZmMlrYpSWQ-5vps3h3CUQSLDq0&t=ffffffffb201fd3f
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	dropped
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	68998
Entropy (8bit):	5.666133861379499
Encrypted:	false
SSDEEP:	1536:PlgguXDXhi2WXBOxSPSW8N6fGNNKXwJs2wVX0cHx:PLu+CGeTKXLVX0g
MD5:	99B323596EFAF979F0B9D2BF1A74A3A5
SHA1:	36C454CC99727FF7D291870D5B290DFAE01FCE0C
SHA-256:	341885EAB01899A35CB0C827A00E5A255EE35F3FE0B86E79413927B32EBAE418
SHA-512:	C8556025E7E731E9DBED2B864F79047D4918F1C8901E5EDFAE3776969388A05E8BD5DED2D7F29ED57BA02707BA1953F504FEAEA947CE7A5942A0509984E37345
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/ScriptResource.axd?d=0HLq5DZTTienD8-N_shQw5ZYxJ531YzNJKJqeNebSa9UGEpk7XrdNU5LZl1_olnoHu0CDe9ycImuoEn45XNJjmetCZzaU0o55XDr2ZFHoDvWflGWiVu47vTPmEwdlqv0sJ8G3ZXIwil1J7kRiztKx0uiY-1YgLb3JNPFVPoDEmw1&t=64bd211b
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/ScriptResource.axd?d=2OhCo73OyGBsu9HtdNMGpaB4ebHC0Wow64z70vEbDX016Q4VYy1TsSAjEcPfwjaseGXT81I9NsCoei6l_F9oV_0TKm0mI3SFi913Q4UdnB0fu5rZPbviFP6dhENUHOrzrf1bzlfqe09JhEJ0uEBltljpPB6xlweZYnXjuc4KC4LTBWkTghrKgddl04vYmjrJ0&t=ffffffffb201fd3f
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	68998
Entropy (8bit):	5.665803606930246
Encrypted:	false
SSDEEP:	1536:PlgguXPjhuqWXBOxSPSW8N6fGNNKb5HJs2wVX0cHx:PLueCGeTKbmVX0g
MD5:	C4C6F877C4826B76993B18D83F8596AF
SHA1:	A640F4D7E1C38B0E097893C4CA41A6E85A49B3C6
SHA-256:	D6F0DC9F0CDFD6874421A5D3153AB72426BBED368D08717DD8C8B847C49D7346
SHA-512:	B6F1C1D047CCE1A3F2C17D4A239F24820467E6A23C359234CCADAC7E0A5FD832E33D748DA79407B40B3D9006177ED44D1AC8427A9EA764DBE945CCF1BD3D54DE
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17444)
Category:	downloaded
Size (bytes):	17672
Entropy (8bit):	5.233316811547578
Encrypted:	false
SSDEEP:	384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM
MD5:	6EFDDF589864D2E146A55C01C6764A35
SHA1:	EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F
SHA-256:	2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999
SHA-512:	1AFC735660AAE010C04EF89C732D08EBA1B87BE6048164F273BEAEBECA3F30062812B4CD141DDF0291A6AB54F730875D597678A3564C0EED2AAC11E5400F951A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.25423.12016/require.js
Preview:	/** vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.22 Copyright (c) 2010-2015, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */.var requirejs,require,define;!function(global){function isFunction(e){return"[object Function]"===ostring.call(e)}function isArray(e){return"[object Array]"===ostring.call(e)}function each(e,t){if(e){var r;for(r=0;r<e.length&&(!e[r]\|\|!t(e[r],r,e));r+=1);}}function eachReverse(e,t){if(e){var r;for(r=e.length-1;r>-1&&(!e[r]\|\|!t(e[r],r,e));r-=1);}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var r;for(r in e)if(hasProp(e,r)&&t(e[r],r))break}function mixin(e,t,r,i){return t&&eachProp(t,function(t,n){(r\|\|!hasProp(e,n))&&(!i\|\|"object"!=typeof t\|\|!t\|\|isArray(t)\|\|isFunction(t)\|\|t instanceof RegExp?e[n]=t:(e[n]\|\|(e[n]={}),mixin(e[n],t,r,i)))}),e}function bind(e,t){return function(){return t.apply(e,ar

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17444)
Category:	dropped
Size (bytes):	17672
Entropy (8bit):	5.233316811547578
Encrypted:	false
SSDEEP:	384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM
MD5:	6EFDDF589864D2E146A55C01C6764A35
SHA1:	EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F
SHA-256:	2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999
SHA-512:	1AFC735660AAE010C04EF89C732D08EBA1B87BE6048164F273BEAEBECA3F30062812B4CD141DDF0291A6AB54F730875D597678A3564C0EED2AAC11E5400F951A
Malicious:	false
Reputation:	low
Preview:	/** vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.22 Copyright (c) 2010-2015, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */.var requirejs,require,define;!function(global){function isFunction(e){return"[object Function]"===ostring.call(e)}function isArray(e){return"[object Array]"===ostring.call(e)}function each(e,t){if(e){var r;for(r=0;r<e.length&&(!e[r]\|\|!t(e[r],r,e));r+=1);}}function eachReverse(e,t){if(e){var r;for(r=e.length-1;r>-1&&(!e[r]\|\|!t(e[r],r,e));r-=1);}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var r;for(r in e)if(hasProp(e,r)&&t(e[r],r))break}function mixin(e,t,r,i){return t&&eachProp(t,function(t,n){(r\|\|!hasProp(e,n))&&(!i\|\|"object"!=typeof t\|\|!t\|\|isArray(t)\|\|isFunction(t)\|\|t instanceof RegExp?e[n]=t:(e[n]\|\|(e[n]={}),mixin(e[n],t,r,i)))}),e}function bind(e,t){return function(){return t.apply(e,ar

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	69174
Entropy (8bit):	5.666325660176303
Encrypted:	false
SSDEEP:	1536:PlgguXvDhOKWXBOxSPSW8N6fGNNKr+KJs2wVX3cH3T:PLuWCGeTKr+9VX3K
MD5:	98A11A5F0D15797878D35532A0BD8B95
SHA1:	2C6E6A34B43C506478EE2E3FEF6008B73BFDB826
SHA-256:	6623283DD64FD2C7A8A3EC0E9B3D8B8C56E5135BDD3624AAA0B29E3D3764AA9B
SHA-512:	3DE8BCC55DDA1B6A434614470E0DA9E210FE8E316C4A9A19BD7A7912A9D9E9343D24FDA9FFC2FA4F00298D2083FB0555452EC9EE8433636E22140056F9174720
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37337)
Category:	dropped
Size (bytes):	40328
Entropy (8bit):	5.385482969292045
Encrypted:	false
SSDEEP:	768:Tkv8WTY/BbI5VVQYxHtGEWGjaKEKlvgVv9yc1F:TW05bs1tGe4dZ
MD5:	B4E27A4D39B598172647E0C174AAF21D
SHA1:	9B63229B34814F26075818D55061867B6C794CE9
SHA-256:	3CDE5E08B570B55AF3C82C6A9D089376373A9E094AF594ECB6DA5E05EB48DC8E
SHA-512:	DEB28E8505E4D1A7E6C6659DF09C83D142A94CA0DA1CEBA0A06843E8E933AA625D4CD6413FF4F5A521AC5C005D7A9AF2191AD8A40D71448318CAC20A4ABBB79E
Malicious:	false
Reputation:	low
Preview:	/! For license information please see spoguestaccess.js.LICENSE.txt /.document.currentScript,define("@fluentui/react-file-type-icons",[],()=>{var e;return(()=>{"use strict";var t=[e=>{var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.call(o,l)&&(c[l]

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	68998
Entropy (8bit):	5.664836113540382
Encrypted:	false
SSDEEP:	1536:PlgguXfThe6WXBOxSPSW8N6fGNNKb5NJs2wVX0cHx:PLu+CGeTKbcVX0g
MD5:	5D8D6B501BE988BCD6F094D56CEBCBBD
SHA1:	25AFF0C292BDB07BD7950A7808F4C57F8D1BDBD6
SHA-256:	325B563FA1848F5D2A0A6130BC1F03BD317BA0BB9B8820D45AA32D129C7EF718
SHA-512:	DB8A3FD9189B36D9759E81DAA80029FDFE200C4CD1EF3186505EF129D0E3F315F98AD366E1A606C2E5DF0050826D675D980D6006850C47A2C2C25612A3DE74F0
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.702819531114783
Encrypted:	false
SSDEEP:	3:H6xhkY:aQY
MD5:	858372DD32511CB4DD08E48A93B4F175
SHA1:	CE4555B7B2EFBBD644D8E34CF3453A0E8CAA3C43
SHA-256:	3D18F3E1469C83D62CF3A39BA93F8EAA5B22447FE630E59F39DC1B7747635359
SHA-512:	6A57E0D4A1C23CB693AA9312F6FDAA1FC4309B5BC91D1B2279B5792BEE3534749FD3693C19AA95E0768800472D11D438EC3116F337679A249C28BE0E038E6DE0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAntAUgXQRQDqhIFDfSCVyI=?alt=proto
Preview:	CgkKBw30glciGgA=

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3331
Entropy (8bit):	7.927896166439245
Encrypted:	false
SSDEEP:	96:zHjOKn3csE3x5liVsCo4GcPIZpV6x5cge8oo9:zDOK3zE3x5TCwcP4LQNeq
MD5:	EF884BDEDEF280DF97A4C5604058D8DB
SHA1:	6F04244B51AD2409659E267D308B97E09CE9062B
SHA-256:	825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB
SHA-512:	A083381C53070B65B3B8A7A7293D5D2674D2F6EC69C0E19748823D3FDD6F527E8D3D31D311CCEF8E26FC531770F101CDAF95F23ECC990DB405B5EF48B0C91BA2
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/_layouts/15/images/microsoft-logo.png
Preview:	.PNG........IHDR.......0............sRGB.........IDATx..=w....G.z..L.4fN.k\dS..._`..........r...~.F..e._.RZ.0.K.\..CB...1.{qq/..^\|.G..o.......?....Or.......y~....]..V.a.mM...M.\kH..@B`s.$"n...)!.@"b#4. !.9...7.u...hD ....T.........:EJ.4"..X........<\|.pgkk+....>~.....pju1i"b.J.&!.!...=T....k..D7.....O.<.?}......./..(.`0..!.C..'.?..e..~.....l6...._.x1rmR...$\|E...l.WKDH...f..... ...Y.0R....>...{...-..o........,...E../......_....eM.Q....@Q...w sp5.9..l.W)...Pq... .]..B..).../M.G.g....].V...5$<......Eb.9.....>LYAk.Z.k..b..]N%>}4a....4!S...t..d..<.8AH+.../r...._...!qt.:q..fR.:..KW.._...T...5..>.0!.hq.rbND\...XR.,2.uX..Q.b...wQ......g..X...F...~.....ikZE...UA....V.I!..]..Mm..R.....~k.VC.n..V.B#W...\..yI.3.....2........6c....2J....,g..5O1.s.4V2.....f..K..Obf\....;.w...\|.F>F>6_z..P.dU<.wVV......?.q.?&........O.>....l.S.upp....59.C_.......fJ.M.={v,......]Y_....n.?UF....v<.$..AD...p.....:$r =p...C.k.3....n.v..~.TGd!...l.W...s..

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37337)
Category:	downloaded
Size (bytes):	40328
Entropy (8bit):	5.385482969292045
Encrypted:	false
SSDEEP:	768:Tkv8WTY/BbI5VVQYxHtGEWGjaKEKlvgVv9yc1F:TW05bs1tGe4dZ
MD5:	B4E27A4D39B598172647E0C174AAF21D
SHA1:	9B63229B34814F26075818D55061867B6C794CE9
SHA-256:	3CDE5E08B570B55AF3C82C6A9D089376373A9E094AF594ECB6DA5E05EB48DC8E
SHA-512:	DEB28E8505E4D1A7E6C6659DF09C83D142A94CA0DA1CEBA0A06843E8E933AA625D4CD6413FF4F5A521AC5C005D7A9AF2191AD8A40D71448318CAC20A4ABBB79E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-11-08.003/spoguestaccesswebpack/spoguestaccess.js
Preview:	/! For license information please see spoguestaccess.js.LICENSE.txt /.document.currentScript,define("@fluentui/react-file-type-icons",[],()=>{var e;return(()=>{"use strict";var t=[e=>{var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.call(o,l)&&(c[l]

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://chamberlinarchitects-my.sharepoint.com/WebResource.axd?d=na8NtmOLcH2-PSkhg-2StciQu83Rz6wegHK-qpykqqPXu1zqQgXBjx-1wJcAzcBoT-1lZ2ky9il7sECAMuM_sInK5ihLxbGkxyJG0zE_XUg1&t=638637567397700854
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	215
Entropy (8bit):	5.337883633119646
Encrypted:	false
SSDEEP:	6:JiMVBdgqZjZWtMfgRTH17IVVQFMRIlNQhFXg6n:MMHdVBZWyUTHj6
MD5:	D87DDCCAB46244FBCF31295B2AAED055
SHA1:	F361959792FBC3517EFF54636983A112BDD01BF4
SHA-256:	A361C23ED2D01B3F4EED66B1AD455B0D6E96F17A8C3441FA6F214A5A94F456B2
SHA-512:	CAC6E076D0430DB4A06C99BC315A99ABBD32CFA33DC089D219001F583C09514ABC0803859E331E92D655640A695951EC7A4C91A06B41DA8DAE8878D72F6D7DCD
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-11-08.003/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist..RequestId:df545aed-701e-005b-5244-3cc6ac000000.Time:2024-11-21T18:34:58.0870297Z</Message></Error>

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2024 19:33:37.819763899 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.819813967 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.819852114 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.819889069 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.819890022 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:37.819924116 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.819962025 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.819967985 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:37.820003033 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:37.828022957 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.830703974 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.830780029 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:37.830791950 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.839256048 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.839338064 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:37.839368105 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.847780943 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.847870111 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:37.847938061 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.856386900 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:37.856466055 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.011692047 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.011754990 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.011830091 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.063719034 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.063818932 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.186013937 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.186088085 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.186189890 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.186218023 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.938306093 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.938364983 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.938580036 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.942406893 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.942538977 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.942603111 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.950709105 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.950824976 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.950879097 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.960331917 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.960587978 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.960669041 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.967639923 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.967792988 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:38.967869043 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.996455908 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:38.996634960 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.116712093 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.116792917 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.116842985 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.116872072 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.727657080 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.727683067 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.727737904 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.729866028 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.729991913 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.730031013 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.737723112 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.737843990 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.737884045 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.745680094 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.745805979 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.745878935 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.753607988 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.753741026 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.753793001 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.761219025 CET	443	49712	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.776909113 CET	49675	443	192.168.2.5	23.1.237.91
Nov 21, 2024 19:33:39.776912928 CET	49674	443	192.168.2.5	23.1.237.91
Nov 21, 2024 19:33:39.792573929 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.793272018 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.808161020 CET	49712	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.901911974 CET	49673	443	192.168.2.5	23.1.237.91
Nov 21, 2024 19:33:39.918268919 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.918889999 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.940128088 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.940220118 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.940319061 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.940570116 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:39.940602064 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.974035978 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.974071026 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:39.974102974 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.624362946 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.624404907 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.624561071 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:40.628413916 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.628504992 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.628560066 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:40.634912014 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.635019064 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.635072947 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:40.643254995 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.643306017 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.643376112 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:40.651727915 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.651813984 CET	443	49708	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:40.651864052 CET	49708	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:41.862076044 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:41.862313032 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:41.887370110 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:41.887411118 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:41.887469053 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:41.888462067 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:41.888478994 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:42.232676029 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:42.232765913 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:42.233835936 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:42.236051083 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:42.236110926 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:42.236258984 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:43.474553108 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:43.474601984 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:43.474699020 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:43.474769115 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:43.474803925 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:43.474860907 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:43.969552994 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:43.969614983 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:43.969635963 CET	49713	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:43.969645977 CET	443	49713	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:44.021677971 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:44.021806955 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:44.021897078 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:44.023127079 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:44.023164034 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:44.104278088 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.104331970 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.104398966 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.106292009 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.106324911 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.119261026 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.119347095 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.123842955 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.123859882 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.124130011 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.126192093 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.126250982 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.126257896 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.126595974 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.171334028 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.668545008 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.668685913 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:44.668760061 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.668823957 CET	49714	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:44.668853998 CET	443	49714	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:45.816015005 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:45.816068888 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:45.816128016 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:45.816509962 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:45.816526890 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:45.919899940 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:45.939069986 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:45.939101934 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:45.940149069 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:45.940167904 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:45.940196037 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:45.940207005 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.427198887 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:46.427270889 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:46.429804087 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:46.429814100 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:46.430140972 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:46.441534996 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:46.441776037 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:46.441781998 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:46.441965103 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:46.483335972 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:46.892923117 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.892985106 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.893052101 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.893095016 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:46.893105030 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.893116951 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:46.893167019 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.893209934 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:46.893465996 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:46.893481970 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.893491030 CET	49715	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:46.893496037 CET	443	49715	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.914869070 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:46.914958954 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:46.915039062 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:46.915219069 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:46.915237904 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:47.123667002 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:47.123763084 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:47.123826981 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:47.123958111 CET	49716	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:47.123975039 CET	443	49716	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:47.202718019 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:47.202775002 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:47.202837944 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:47.203165054 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:47.203202009 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:47.203250885 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:47.203988075 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:47.203999043 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:47.204178095 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:47.204190016 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:47.620275974 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:47.620363951 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:47.626595020 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:47.626607895 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:47.627027035 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:47.668832064 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:47.695667982 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:47.739346981 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.176661968 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.176687002 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.176692963 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.176753998 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.176768064 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.176800966 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.176815987 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.176827908 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.176839113 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.176852942 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.177200079 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:48.177263021 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:48.177326918 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:48.177835941 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:48.177862883 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:48.358968973 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.359040976 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.359096050 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.359167099 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.359200954 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.360374928 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.401057005 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.401108027 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.401159048 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.401179075 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.401210070 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.401231050 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.541363955 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.541414022 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.541465998 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.541496992 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.541527033 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.541894913 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.572896004 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.572946072 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.572983980 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.573000908 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.573038101 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.573056936 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.602168083 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.602220058 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.602268934 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.602283955 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.602335930 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.602335930 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.622247934 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.622296095 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.622328043 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.622342110 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.622370005 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.622390985 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.738719940 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.738785028 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.738830090 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.738899946 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.738936901 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.738960981 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.755867958 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.755918980 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.755948067 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.755963087 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.755992889 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.756012917 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.771703005 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.771761894 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.771778107 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.771791935 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.771821022 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.771862984 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.785576105 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.785620928 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.785645962 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.785659075 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.785686970 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.785706997 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.793535948 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.796591043 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.796669960 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.798130989 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.798219919 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.801314116 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.801394939 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.801413059 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.801443100 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.801492929 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.801492929 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.808197975 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.808382034 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.808403015 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.814130068 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.814176083 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.814244032 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.814316988 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.814388037 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.814388037 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.819936037 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.820020914 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.820038080 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.820099115 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.820101976 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.820121050 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.820173979 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.820209026 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.820209026 CET	49723	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.820229053 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.820251942 CET	443	49723	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.842253923 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.842559099 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.842577934 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.844075918 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.844132900 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.844877958 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.844980001 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.851358891 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.856791973 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.856816053 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.882838011 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.882916927 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.882983923 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.886002064 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.886051893 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.886117935 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.886871099 CET	49733	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.886903048 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.886962891 CET	49733	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.887274981 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.887300968 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.887345076 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.887360096 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:48.889076948 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.889087915 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.889138937 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.889205933 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.889219046 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.889296055 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.889303923 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.889436960 CET	49733	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.889451027 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.891041040 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.891048908 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.891097069 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.891411066 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:48.891417980 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:48.903814077 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.935882092 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:48.942620039 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:48.943162918 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:48.943216085 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:48.945616961 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:48.945631027 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:48.945689917 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:48.945729971 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:49.390618086 CET	49674	443	192.168.2.5	23.1.237.91
Nov 21, 2024 19:33:49.390691042 CET	49675	443	192.168.2.5	23.1.237.91
Nov 21, 2024 19:33:49.487097025 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.487133026 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.487198114 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.487261057 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.487343073 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.511959076 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.511970997 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.512008905 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.512036085 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.512080908 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.513940096 CET	49673	443	192.168.2.5	23.1.237.91
Nov 21, 2024 19:33:49.528717041 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.528790951 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.697582960 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.697601080 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.697681904 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.697741032 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.719957113 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.720000029 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:33:49.720037937 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:33:49.720057964 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.720103979 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.720138073 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:33:49.725502014 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:33:49.725528955 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:33:49.747442007 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.747457027 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.747620106 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.747683048 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.763217926 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.763246059 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.763257980 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.763351917 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.763353109 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.763390064 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.813333035 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.832242966 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:49.832304955 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:49.832345009 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:49.832442045 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:49.832442045 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:49.832473040 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:49.832541943 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:49.833828926 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:49.837729931 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:49.837729931 CET	49725	443	192.168.2.5	40.126.53.21
Nov 21, 2024 19:33:49.837750912 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:49.837762117 CET	443	49725	40.126.53.21	192.168.2.5
Nov 21, 2024 19:33:49.944407940 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.944422007 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.944469929 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.944520950 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.944879055 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.951968908 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.951980114 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.952032089 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.952078104 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.952234983 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.956974983 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.957699060 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.957709074 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.957775116 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.957787037 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.957910061 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.960650921 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.960655928 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.960685968 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.960695982 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.961071968 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.961102009 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.961110115 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.961111069 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.961258888 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.961266041 CET	49726	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.961303949 CET	443	49726	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.962106943 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.962107897 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.962120056 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.962126970 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.962351084 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:49.962383986 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:49.999375105 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.243238926 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:50.243299961 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:50.243700981 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:50.245759010 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:50.245774984 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:50.400850058 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.400871038 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.401068926 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.401091099 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.425822973 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.425851107 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.425868988 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.425901890 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.425915956 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.425956011 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.431616068 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.431749105 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:50.434693098 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:50.434704065 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.434957027 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.436456919 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:50.436456919 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:50.436479092 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.436911106 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:50.442679882 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.442701101 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.442964077 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.442964077 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.442989111 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.443119049 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.483335972 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.614918947 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.614950895 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.615019083 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.615155935 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.615556002 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.615653992 CET	443	49727	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:50.615833998 CET	49727	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:50.664659023 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.665307045 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.665389061 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.667267084 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.667305946 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.668680906 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.672720909 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.672744989 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.673113108 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.673144102 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.673537970 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.673548937 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.673882008 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.673923969 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.675554037 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.675563097 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.676347971 CET	49733	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.676372051 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.676980972 CET	49733	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.676985979 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.682753086 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:50.682806969 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.682869911 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:50.683706999 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:50.683723927 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.752378941 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.753093958 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.753113031 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.753978968 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:50.753983974 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:50.766972065 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:50.767019033 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:50.767076969 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:50.767396927 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:50.767415047 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:50.977808952 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.977902889 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:50.977982998 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:51.016551971 CET	49730	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:51.016606092 CET	443	49730	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:51.105439901 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.105542898 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.105595112 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.106424093 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.106580973 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.106636047 CET	49733	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.108297110 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.108357906 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.108427048 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.108465910 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.108525038 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.109184027 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.109241962 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.109301090 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.109332085 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.109375954 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.112441063 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.112584114 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.112636089 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.114208937 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.114351034 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.114402056 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.126506090 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.126539946 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.126569986 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.126580000 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.128173113 CET	49733	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.128195047 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.128206968 CET	49733	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.128211021 CET	443	49733	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.132728100 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.132767916 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.132803917 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.132818937 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.135040045 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.135072947 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.135088921 CET	49732	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.135097980 CET	443	49732	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.169267893 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.169325113 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.169387102 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.170993090 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.171017885 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.171331882 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.171371937 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.171436071 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.171554089 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.171574116 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.172342062 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.172355890 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.172420979 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.172416925 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.172508001 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.172537088 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.172552109 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.172571898 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.172662973 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.172687054 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.212883949 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.212932110 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.212984085 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.213011026 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.213242054 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.213242054 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.213267088 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.213645935 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.213757038 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.213805914 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.218430042 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.218456984 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.218522072 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.218732119 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:51.218743086 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:51.487977028 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:33:51.488296986 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:33:51.488325119 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:33:51.489204884 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:33:51.489291906 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:33:51.490490913 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:33:51.490542889 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:33:51.542025089 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:33:51.542049885 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:33:51.546751976 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.546920061 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.547286987 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.547743082 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.547760963 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.548265934 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.548290968 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.548795938 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.548816919 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.548840046 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.548902035 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.549304962 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.549345016 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.549401045 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.549843073 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.549904108 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.551162958 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.551223993 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.551640987 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.551738977 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.553013086 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.553020954 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.553308964 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.553319931 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.553383112 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.590234995 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:33:51.595346928 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:51.606792927 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.606916904 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:51.679207087 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:51.679281950 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:51.683454990 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:51.683480024 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:51.683862925 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:51.730536938 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:51.742094040 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:51.787333965 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:52.036602020 CET	443	49710	23.1.237.91	192.168.2.5
Nov 21, 2024 19:33:52.036693096 CET	49710	443	192.168.2.5	23.1.237.91
Nov 21, 2024 19:33:52.077402115 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.077430010 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.077498913 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.077523947 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.077579021 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.110726118 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.110735893 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.110790968 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.110832930 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.110838890 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.122009039 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.122073889 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.122093916 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.122142076 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.126988888 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.152076960 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.152096033 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.152160883 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.152179003 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.152282953 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.168858051 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.168926001 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.198901892 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:52.198976040 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:52.199182034 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:52.202027082 CET	49746	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:52.202043056 CET	443	49746	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:52.244002104 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:52.244045019 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:52.244261026 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:52.244574070 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:52.244587898 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:52.290990114 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.291064978 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.291085958 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.298367977 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.298418045 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.298424006 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.298466921 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.298466921 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.298516035 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.298652887 CET	49745	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.298662901 CET	443	49745	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.309037924 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.309081078 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.309137106 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.309545994 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.309561968 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.309612989 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.309767008 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.309783936 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.309969902 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.309983969 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.339904070 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.339976072 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.339993000 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.357023954 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.357238054 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.357255936 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.361035109 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.361104965 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.361459970 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.361574888 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.361640930 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.362338066 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.362401962 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.362410069 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.384499073 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.384574890 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.384593964 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.384675026 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.384723902 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.385926008 CET	49744	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:52.385938883 CET	443	49744	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:52.397028923 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.397058964 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.397115946 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.397329092 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.397349119 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.403326035 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.403345108 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.448698997 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.892441034 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.892487049 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.892946005 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:52.892977953 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.893434048 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:52.893434048 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:52.893454075 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.893459082 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.893738031 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:52.893743038 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.899517059 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:52.899595022 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.899624109 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:52.899647951 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.901410103 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:52.901423931 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:52.901462078 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.901478052 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.901815891 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:52.903625965 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:52.903625965 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:52.903647900 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:52.903728962 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:52.925052881 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.925061941 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.925103903 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.925134897 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.925146103 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.925173044 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.928714991 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.929552078 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:52.929552078 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:52.929596901 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.929604053 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:52.942377090 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.942595005 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:52.942603111 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:52.951324940 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:52.996444941 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.004172087 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.004606962 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.004642010 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.005002022 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.005008936 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.022797108 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.023297071 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.023325920 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.023758888 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.023765087 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.103632927 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.103647947 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.103682995 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.103713989 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.103771925 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.104085922 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.104159117 CET	443	49748	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.104293108 CET	49748	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.326688051 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.326731920 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.329471111 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.329471111 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.329600096 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.329629898 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.330898046 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.330966949 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.331038952 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.331269979 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.331269979 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.331279993 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.331291914 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.332634926 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.332665920 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.333753109 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.333781958 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.333796978 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.333904028 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.333909035 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.333981991 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.334042072 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.334049940 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.362652063 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.362799883 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.363554001 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.363598108 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.363598108 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.363620043 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.363637924 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.365768909 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.365780115 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.370053053 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.370153904 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.370160103 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.449882984 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.449959040 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.450139999 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.450232029 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.450248003 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.450259924 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.450265884 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.452910900 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.452965021 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.453198910 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.453198910 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.453238964 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.476161957 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.476242065 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.476488113 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.476510048 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.476511002 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.476521015 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.476524115 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.491677046 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.491694927 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.492309093 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.492309093 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:53.492328882 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:53.565747023 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:53.565977097 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:53.572185040 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:53.597595930 CET	49747	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:33:53.597606897 CET	443	49747	20.198.118.190	192.168.2.5
Nov 21, 2024 19:33:53.712193012 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:53.712395906 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:53.713566065 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:53.713577032 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:53.713820934 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:53.716027975 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:53.763329029 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:53.891237974 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.891484976 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.891509056 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.892538071 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.892596960 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.892924070 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.893003941 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.893066883 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.893076897 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.896879911 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:53.897138119 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:53.897152901 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:53.898287058 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:53.898648977 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:53.898776054 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:53.898781061 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:53.898823023 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:53.934809923 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.949826002 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:53.986557961 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.986763954 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.986783981 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.987957954 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:53.988255978 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.988423109 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:53.988434076 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.035335064 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.041954041 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.248898983 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:54.249083042 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:54.249140978 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:54.250113964 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:54.250139952 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:54.250153065 CET	49754	443	192.168.2.5	23.218.208.109
Nov 21, 2024 19:33:54.250160933 CET	443	49754	23.218.208.109	192.168.2.5
Nov 21, 2024 19:33:54.421657085 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.421679974 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.421734095 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.421757936 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.442838907 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.442884922 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.442934990 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.442953110 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.442981958 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.459604979 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.459669113 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.459680080 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.482597113 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.482651949 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.482706070 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.482723951 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.482763052 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.483705997 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.483778954 CET	443	49755	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.483836889 CET	49755	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.489002943 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.489062071 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.489139080 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.489362955 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.489392996 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.513638973 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.513667107 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.513678074 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.513706923 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.513724089 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.513755083 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.513807058 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.514533997 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.514580965 CET	443	49743	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.514641047 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.514661074 CET	49743	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.518663883 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.533957958 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.533982992 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.534017086 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.534020901 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.534050941 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.534063101 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.534085989 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.534101963 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.558559895 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.558623075 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.633454084 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.633471012 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.633497000 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.633514881 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.633600950 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.643640041 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.643650055 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.643693924 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.643703938 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.643735886 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.643769979 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.643790007 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.650206089 CET	49756	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.650224924 CET	443	49756	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.651820898 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.651858091 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.655493021 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.658559084 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:54.658574104 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:54.730756998 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.730885029 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.730896950 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.753053904 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.753143072 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.753165960 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.780510902 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.780560017 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.780632973 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.780653000 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.780679941 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.780930996 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:54.781038046 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.782867908 CET	49758	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:54.782891035 CET	443	49758	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:55.125037909 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.125514030 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.125576019 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.125983000 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.125997066 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.169034958 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.170298100 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.170299053 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.170321941 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.170339108 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.190113068 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.190666914 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.190686941 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.193480015 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.193486929 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.218151093 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.218559980 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.218573093 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.219151974 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.219156027 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.344269037 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.344919920 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.344943047 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.345755100 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.345762014 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.568826914 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.568994045 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.569235086 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.569235086 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.569235086 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.571757078 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.571850061 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.572001934 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.572525024 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.572560072 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.615291119 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.615478039 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.615591049 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.615591049 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.616360903 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.616399050 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.617719889 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.617768049 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.617863894 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.617974043 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.617986917 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.656897068 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.656964064 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.657054901 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.657149076 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.657165051 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.657186031 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.657191038 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.659822941 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.659909010 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.659996986 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.660172939 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.660207033 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.741012096 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.741275072 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.741333961 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.742327929 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.742346048 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.745651960 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.745735884 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.745817900 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.746042013 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.746059895 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.807883024 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.807969093 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.808023930 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.808270931 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.808284998 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.808300018 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.808305979 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.812014103 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.812057972 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.812135935 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.812411070 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.812438011 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:55.871948957 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:55.871973991 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:56.019752979 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:56.065237045 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:56.071474075 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:56.071491003 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:56.072768927 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:56.075514078 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:56.075608015 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:56.079103947 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:56.123333931 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:56.293637037 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.293858051 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.293884993 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.294773102 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.294842005 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.295207977 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.295278072 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.295381069 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.295389891 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.339927912 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.846335888 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.846389055 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.846661091 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.846698046 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.862799883 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.862823009 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.862879038 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.862893105 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.862932920 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.863253117 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.863359928 CET	443	49767	13.107.136.10	192.168.2.5
Nov 21, 2024 19:33:56.863432884 CET	49767	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:33:56.870141029 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:56.870249987 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:56.870495081 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:56.870769978 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:56.870817900 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:57.355012894 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.356899023 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.356957912 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.357372999 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.357384920 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.465321064 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.465828896 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.465923071 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.465972900 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.466384888 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.466392040 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.466576099 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.466608047 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.466887951 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.466892958 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.506743908 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.507141113 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.507188082 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.507493973 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.507503033 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.678072929 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.679095984 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.679096937 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.679136038 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.679162025 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.800046921 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.800138950 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.800307989 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.800467014 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.800467014 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.800509930 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.800523996 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.803052902 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.803101063 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.803258896 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.803509951 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.803543091 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.903836966 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.903898954 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.904019117 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.904196978 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.904196978 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.904222965 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.904234886 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.906641006 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.906672001 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.907620907 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.912169933 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.912204981 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.923707008 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.923784018 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.923959970 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.924057961 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.924057961 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.924068928 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.924082041 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.927097082 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.927181959 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.927340031 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.927575111 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.927608967 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.962291002 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.962368965 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.962542057 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.962620974 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.962620974 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.962661982 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.962690115 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.965054989 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.965090036 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:57.965425014 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.967322111 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:57.967334986 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:58.129837036 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:58.129895926 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:58.129976988 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:58.130163908 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:58.130193949 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:58.130247116 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:58.130261898 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:58.132848978 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:58.132890940 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:58.132998943 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:58.133167028 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:58.133198023 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:58.194535971 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:33:58.194577932 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:33:58.194722891 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:33:58.196029902 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:33:58.196049929 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:33:58.462217093 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.462519884 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:58.462584019 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.463071108 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.463541031 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:58.463541031 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:58.463653088 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.512355089 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:58.974026918 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.974081993 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.974101067 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.974152088 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:58.974194050 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.974220037 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:58.974438906 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:58.974499941 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:58.975011110 CET	49765	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:58.975034952 CET	443	49765	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:59.056947947 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:59.056976080 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:59.057051897 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:59.057105064 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:59.057337999 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:59.071183920 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:59.071192980 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:59.071352959 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:59.071436882 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:59.071485043 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:59.071660995 CET	443	49776	13.107.138.10	192.168.2.5
Nov 21, 2024 19:33:59.071715117 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:59.071733952 CET	49776	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:33:59.655131102 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.658142090 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.659512043 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.659543991 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.659807920 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.659816980 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.660058022 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.660063982 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.660219908 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.660227060 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.694952965 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.695333958 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.695350885 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.695703983 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.695709944 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.769545078 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.769925117 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.769948959 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.770301104 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.770308018 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.963021040 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:33:59.963228941 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:33:59.964792967 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:33:59.964802980 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:33:59.965207100 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:33:59.990530014 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.990863085 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.990900993 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:33:59.991246939 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:33:59.991264105 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.011975050 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.012139082 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.055365086 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.090480089 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.090629101 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.090709925 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.090853930 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.090894938 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.090924978 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.090940952 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.093429089 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.093481064 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.093599081 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.093744040 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.093761921 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.115469933 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.115528107 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.115581036 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.115662098 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.115693092 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.115721941 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.115736008 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.117877007 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.117923975 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.117983103 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.118104935 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.118122101 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.142518044 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.142663956 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.142719030 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.142755985 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.142774105 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.142786026 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.142792940 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.144865990 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.144900084 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.144963980 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.145097017 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.145114899 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.223925114 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.224069118 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.224140882 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.224231958 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.224231958 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.224270105 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.224298954 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.226093054 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.226110935 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.226180077 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.226303101 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.226320028 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.443265915 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.443480968 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.443557024 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.443625927 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.443625927 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.443675041 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.443701029 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.445723057 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.445754051 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.445847034 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.445966005 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:00.445981026 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:00.658926010 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.658963919 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.658974886 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.658994913 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.659027100 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.659033060 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.659059048 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.659075975 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.659075975 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.659101009 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.682149887 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.682245016 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.682257891 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.682305098 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.697741985 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.697772980 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:00.697787046 CET	49782	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:00.697794914 CET	443	49782	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:01.147559881 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:01.147733927 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:01.147800922 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:34:01.206003904 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:01.206056118 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:01.206119061 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:01.206718922 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:01.206737995 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:01.529659986 CET	49740	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:34:01.529716015 CET	443	49740	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:01.846828938 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:01.847341061 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:01.847363949 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:01.847841024 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:01.847846031 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:01.947693110 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:01.948277950 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:01.948359966 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:01.948723078 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:01.948738098 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.007762909 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.008371115 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.008389950 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.008824110 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.008831024 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.028258085 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.028666019 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.028688908 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.029263020 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.029268980 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.171000957 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.171832085 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.171847105 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.172331095 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.172334909 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.289072990 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.289141893 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.289366007 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.289469957 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.289486885 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.289499044 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.289505005 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.292851925 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.292884111 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.292947054 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.293200970 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.293215990 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.399651051 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.399832010 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.400078058 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.400141954 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.400141954 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.400178909 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.400206089 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.403198957 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.403228998 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.403304100 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.403510094 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.403523922 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.457243919 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.457299948 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.457437038 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.457844019 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.457844019 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.457865000 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.457874060 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.462192059 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.462220907 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.462402105 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.462538004 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.462551117 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.486196995 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.486357927 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.486633062 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.486797094 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.486841917 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.486872911 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.486888885 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.489645958 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.489686966 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.489789963 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.489981890 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.490011930 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.608572960 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.608644009 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.608845949 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.608886003 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.608905077 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.608916998 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.608922958 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.611735106 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.611759901 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:02.611954927 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.612181902 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:02.612195015 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:03.626653910 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:03.626774073 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:03.628905058 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:03.628917933 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:03.629733086 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:03.631278038 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:03.631319046 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:03.631325006 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:03.631442070 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:03.675326109 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:04.014205933 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.014755011 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.014772892 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.015256882 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.015261889 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.189081907 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.189618111 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.189630032 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.190293074 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.190299034 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.193747997 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.194179058 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.194195032 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.194612980 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.194617033 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.276160002 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.276676893 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.276737928 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.277095079 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.277107954 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.318063021 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:04.318357944 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:04.318424940 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:04.318996906 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:04.319015980 CET	443	49789	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:04.319042921 CET	49789	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:04.450391054 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.450483084 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.450709105 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.450752020 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.450752020 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.450772047 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.450782061 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.453455925 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.453514099 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.453598976 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.453767061 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.453795910 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.619496107 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.620065928 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.620084047 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.620528936 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.620534897 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.624361038 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.624530077 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.624591112 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.624615908 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.624633074 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.624641895 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.624649048 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.627227068 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.627259970 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.627331018 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.627614975 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.627641916 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.641665936 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.641819000 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.641890049 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.641920090 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.641928911 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.641943932 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.641951084 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.644181967 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.644200087 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.644323111 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.644484043 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.644495010 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.728002071 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.728151083 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.728513002 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.728568077 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.728568077 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.728600025 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.728622913 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.731332064 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.731384039 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:04.733963013 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.734055996 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:04.734072924 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:05.134932995 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:05.135091066 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:05.135234118 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:05.135279894 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:05.135301113 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:05.135318995 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:05.135324955 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:05.138216019 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:05.138236046 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:05.138446093 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:05.138601065 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:05.138612986 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.396564007 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:06.396619081 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:06.396703959 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:06.397336006 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:06.397355080 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:06.422938108 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.423497915 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.423513889 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.423979044 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.423985004 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.477827072 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.478424072 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.478467941 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.479190111 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.479207993 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.537913084 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.538403988 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.538418055 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.538880110 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.538883924 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.574942112 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.575351954 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.575366020 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.575786114 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.575790882 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.859337091 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.859396935 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.859584093 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.859716892 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.859716892 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.859743118 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.859761953 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.862735987 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.862807989 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.862926960 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.863100052 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.863121986 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.934643030 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.934720039 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.934897900 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.934973955 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.934973955 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.935031891 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.935058117 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.937500000 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.937536955 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.937618017 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.937788963 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.937807083 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.986457109 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.987750053 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.987767935 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.988142014 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.988147020 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.992170095 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.992332935 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.992516041 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.992584944 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.992584944 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.992614985 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.992624044 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.994883060 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.994900942 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:06.995112896 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.995271921 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:06.995285034 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.127777100 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.127986908 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.128062963 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.128097057 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.128113985 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.128204107 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.128210068 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.130875111 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.130944014 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.131031036 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.131187916 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.131203890 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.441581011 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.441775084 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.442022085 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.442022085 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.442022085 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.444420099 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.444574118 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.444655895 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.444825888 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.444869041 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:07.746412992 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:07.746442080 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.654629946 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.655323982 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:08.655369043 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.655755043 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:08.655764103 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.724069118 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:08.724176884 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:08.726402998 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:08.726413012 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:08.726741076 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:08.728765011 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:08.728830099 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:08.728838921 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:08.728972912 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:08.731101036 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.732234001 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:08.732266903 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.732666969 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:08.732675076 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.737961054 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.738326073 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:08.738342047 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.738748074 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:08.738751888 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.775336981 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:08.940994978 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.941602945 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:08.941652060 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:08.942002058 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:08.942009926 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.100765944 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.100836992 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.100922108 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.101104021 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.101129055 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.101145029 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.101152897 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.103925943 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.103976965 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.104070902 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.104635954 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.104655027 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.170553923 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.171176910 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.171233892 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.171669960 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.171684980 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.176872015 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.177141905 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.177210093 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.177257061 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.177257061 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.177280903 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.177303076 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.177309990 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.177378893 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.177437067 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.177478075 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.177478075 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.177500010 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.177512884 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.180695057 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.180757046 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.180804968 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.180845976 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.180852890 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.180911064 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.180970907 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.180986881 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.181052923 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.181087017 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.377479076 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:09.377521992 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:09.377592087 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:09.377815008 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:09.377866030 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:09.377928019 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:09.378067970 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:09.378084898 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:09.378221989 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:09.378246069 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:09.428555012 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.428647995 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:09.428752899 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.428858995 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:09.428864002 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.428929090 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:09.428998947 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.429028988 CET	49800	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:09.429049969 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.429052114 CET	443	49800	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:09.429096937 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.429114103 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.432187080 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.432229996 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.432306051 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.432442904 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.432457924 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.626151085 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.626312017 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.626408100 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.626533031 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.626533031 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.626575947 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.626606941 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.629376888 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.629426003 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:09.629523993 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.629690886 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:09.629705906 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:10.968246937 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:10.988415956 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:10.988466978 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.008953094 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.015306950 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.031960964 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.036895037 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.040134907 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.054569006 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.080343008 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.086662054 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.086698055 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.087136984 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.087151051 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.087627888 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.087682962 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.088016987 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.088031054 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.088558912 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.088570118 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.088968992 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.088975906 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.089478970 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.089529037 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.089601994 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.089612961 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.090100050 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.092922926 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.093002081 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.111989021 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.112133026 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.146270037 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.146500111 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.146625996 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.146675110 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.146720886 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.191108942 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.191134930 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:11.220554113 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.221060038 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.221134901 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.221544981 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.221560001 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.230792999 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:11.412822962 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.413434982 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.413511038 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.413922071 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.413952112 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.483890057 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.483979940 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.484039068 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.484225988 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.484249115 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.484262943 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.484271049 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.487385035 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.487449884 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.487514019 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.487665892 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.487682104 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.601963997 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.602035046 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.602128029 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.602287054 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.602287054 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.602350950 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.602382898 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.605139971 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.605225086 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.605321884 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.606018066 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.606051922 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.630686045 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.630752087 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.630809069 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.630971909 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.630990982 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.631248951 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.631258011 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.633475065 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.633500099 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.633583069 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.633727074 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.633750916 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.773046970 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.773149014 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.773276091 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.773487091 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.773508072 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.773550034 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.773556948 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.776400089 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.776452065 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:11.776540995 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.776750088 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:11.776766062 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:12.051548004 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.051656008 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.051723003 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.051759958 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.051805973 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.094624996 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.094646931 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.094661951 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.094744921 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.094813108 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.094841003 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.117889881 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.118026972 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.118094921 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.118160963 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.153213024 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:12.153388977 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:12.153507948 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:12.153595924 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:12.153640032 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:12.153709888 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:12.153728008 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:12.155786037 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:12.155838013 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:12.155911922 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:12.156049967 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:12.156066895 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:12.265364885 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.265393019 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.265454054 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.265522957 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.265552044 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.293880939 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.293927908 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.293955088 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.293984890 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.294013977 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.319001913 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.319024086 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.319077015 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.319098949 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.319129944 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.335465908 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.335514069 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.335540056 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.335560083 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.335589886 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.383708954 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.453990936 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.454037905 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.454056978 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.454083920 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.454137087 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.454155922 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.465560913 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.465581894 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.465600014 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.465626001 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.465643883 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.465673923 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.466577053 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.474792004 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.474801064 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.474860907 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.474895954 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.474917889 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.474956989 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.476713896 CET	49810	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.476758957 CET	443	49810	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.507354021 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.881957054 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.882014990 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.882091045 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.882105112 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.883326054 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.909759998 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.909781933 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.909812927 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.909863949 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.909909010 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:12.926459074 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:12.926547050 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.140144110 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.140178919 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.140264988 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.140310049 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.140319109 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.173780918 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.173834085 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.173875093 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.173882008 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.173908949 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.199112892 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.199124098 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.199177027 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.199183941 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.212465048 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.212937117 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.212979078 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.213464975 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.213478088 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.224800110 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.224833012 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.224853992 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.224860907 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.224884987 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.224905968 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.277898073 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.277910948 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.289900064 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.289922953 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.289978981 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.289983988 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.290028095 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.290038109 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.290038109 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.315450907 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.315466881 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.315521955 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.315530062 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.315537930 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.315574884 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.340517044 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.340539932 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.340574026 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.340598106 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.340643883 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.380404949 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.380429029 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.380446911 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.380477905 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.380513906 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.380523920 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.394706964 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.394727945 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.394783974 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.394794941 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.394814014 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.403923988 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.403935909 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.404025078 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.404038906 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.413163900 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.413213968 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.413218975 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.413269997 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.413324118 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.415358067 CET	49809	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:13.415380001 CET	443	49809	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:13.535290956 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.554527998 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.577781916 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.605658054 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.675421953 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.682920933 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.683013916 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.683118105 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.689382076 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.689394951 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.689651012 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.689673901 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.689915895 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.689923048 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.690068007 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.690073967 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.690208912 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.690228939 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.690244913 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.690254927 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.690260887 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.690274954 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.690627098 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.690640926 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.692563057 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.692598104 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.692666054 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.692837954 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.692853928 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.762736082 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:13.762772083 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:13.762841940 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:13.764136076 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:13.764151096 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:13.974329948 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.974855900 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.974916935 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:13.975294113 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:13.975310087 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.015938997 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.016001940 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.016061068 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.016223907 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.016248941 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.016278982 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.016284943 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.019211054 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.019243002 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.019323111 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.019439936 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.019448996 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.031419039 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.031596899 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.031662941 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.031692028 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.031708956 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.031721115 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.031725883 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.033843040 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.033879042 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.034053087 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.034080029 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.034085989 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.154855013 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.155025005 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.155101061 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.155167103 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.155167103 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.155205011 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.155230999 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.157447100 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.157537937 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.157639980 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.157756090 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.157778978 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.417902946 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.418078899 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.418143988 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.418575048 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.418593884 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.418628931 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.418636084 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.422830105 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.422878027 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:14.422945023 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.423243999 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:14.423259974 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.442338943 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:15.442643881 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:15.442707062 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:15.444225073 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:15.444288015 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:15.444652081 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:15.444746017 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:15.444883108 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:15.444899082 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:15.493557930 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.494045973 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.494076967 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.494515896 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.494523048 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.496676922 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:15.770246029 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.770868063 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.770885944 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.771769047 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.771775007 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.804440022 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.805052042 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.805069923 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.805677891 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.805681944 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.940973997 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.941113949 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.941178083 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.945477009 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.945477962 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.945533991 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.945561886 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.984020948 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.985656023 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.985702038 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.986140966 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.986155033 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.987864017 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.987910986 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:15.988003016 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.988128901 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:15.988156080 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.000392914 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.000427008 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.000516891 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.000530005 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.000591040 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.031230927 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.031241894 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.031353951 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.031378984 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.047817945 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.047893047 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.047911882 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.047964096 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.207007885 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.208117962 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.208163023 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.208640099 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.208656073 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.220705986 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.220788002 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.220901966 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.222721100 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.222733974 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.222826004 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.222893000 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.222923040 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.223474979 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.223474979 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.223495007 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.223503113 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.233561039 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.233623981 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.233762980 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.233918905 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.233947992 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.247004986 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.247133017 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.247198105 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.271384001 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.271423101 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.271451950 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.271481037 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.271500111 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.278069973 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.278157949 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.278217077 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.278408051 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.278419971 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.278451920 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.278456926 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.281316042 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.281359911 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.281430960 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.281598091 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.281606913 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.296705961 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.296744108 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.296777964 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.296797037 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.296817064 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.347239971 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.429677010 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.429692984 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.429718018 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.429750919 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.429795027 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.439136028 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.439340115 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.440021038 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.440031052 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.440069914 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.440103054 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.440103054 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.440103054 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.440112114 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.440160036 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.442473888 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.442529917 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.442586899 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.442743063 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.442761898 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.456765890 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.456794977 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.456855059 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.456928015 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.456955910 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.469116926 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.469127893 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.469181061 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.469202042 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.478095055 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.478127003 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.478163004 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.478179932 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.478210926 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.489758968 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.489772081 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.489833117 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.489870071 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.495790958 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.495852947 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.495881081 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.495909929 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.495950937 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.496172905 CET	49821	443	192.168.2.5	13.107.138.10
Nov 21, 2024 19:34:16.496191025 CET	443	49821	13.107.138.10	192.168.2.5
Nov 21, 2024 19:34:16.657416105 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.657515049 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.657597065 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.657737017 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.657782078 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.657830954 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.657851934 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.660579920 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.660677910 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.660792112 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.660952091 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.660985947 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:16.746659994 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:16.746725082 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:17.800123930 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:17.800683975 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:17.800741911 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:17.801155090 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:17.801167011 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.036895990 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.037461042 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.037523031 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.037919044 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.037935019 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.093081951 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.093646049 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.093722105 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.094089985 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.094104052 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.263088942 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.263242006 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.263334036 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.263662100 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.263710976 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.263741970 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.263757944 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.267061949 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.267165899 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.267255068 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.267394066 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.267426014 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.276123047 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.276506901 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.276546001 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.276952982 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.276966095 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.448463917 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.449004889 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.449045897 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.449558020 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.449590921 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.516000986 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.516176939 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.516235113 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.516284943 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.516309023 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.516323090 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.516330004 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.519188881 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.519233942 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.519299030 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.519467115 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.519475937 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.579170942 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.579248905 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.579302073 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.579396963 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.579405069 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.579416037 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.579420090 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.583012104 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.583056927 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.583133936 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.583436012 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.583451986 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.735773087 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.735836983 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.735888958 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.736083984 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.736100912 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.736110926 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.736116886 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.738888979 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.738981962 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.739072084 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.739245892 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.739381075 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.902998924 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.903101921 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.903155088 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.903481960 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.903496027 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.903510094 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.903513908 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.906073093 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.906117916 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:18.906192064 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.906438112 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:18.906449080 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.065136909 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.065740108 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.065819025 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.066178083 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.066194057 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.250411987 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.251194000 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.251255035 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.251650095 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.251663923 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.317042112 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.317523003 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.317539930 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.318006039 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.318011999 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.510277033 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.510499954 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.510590076 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.510632038 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.510653019 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.510663033 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.510668039 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.514560938 CET	49836	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.514585972 CET	443	49836	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.514659882 CET	49836	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.514830112 CET	49836	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.514842033 CET	443	49836	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.522324085 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.522722960 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.522737980 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.523183107 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.523189068 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.692051888 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.692284107 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.692373991 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.692450047 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.692450047 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.692485094 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.692513943 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.693706989 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.694071054 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.694086075 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.694489002 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.694494963 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.695105076 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.695137024 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.695209980 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.695334911 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.695342064 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.769093990 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.769167900 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.769263983 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.769360065 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.769376993 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.769387007 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.769392967 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.771990061 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.772025108 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.772128105 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.772290945 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.772304058 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.973170996 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.973335981 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.973438025 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.973524094 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.973524094 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.973571062 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.973607063 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.976433992 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.976468086 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:20.976612091 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.976753950 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:20.976764917 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:21.147794008 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:21.147872925 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:21.147950888 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:21.148174047 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:21.148200035 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:21.148211002 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:21.148216963 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:21.151340008 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:21.151366949 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:21.151454926 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:21.151631117 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:21.151645899 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:21.354007959 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:21.354077101 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:21.354178905 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:21.354209900 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:21.354237080 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:21.354288101 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:21.357614040 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:21.357629061 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:21.357898951 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:21.357929945 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.284441948 CET	443	49836	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.284985065 CET	49836	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.285027027 CET	443	49836	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.285443068 CET	49836	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.285459995 CET	443	49836	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.440692902 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.441128016 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.441143990 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.441694021 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.441696882 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.554172993 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.554687977 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.554717064 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.555152893 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.555160046 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.707484007 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.708050013 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.708076000 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.708491087 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.708497047 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.722456932 CET	443	49836	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.722614050 CET	443	49836	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.722676039 CET	49836	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.799123049 CET	49836	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.799159050 CET	443	49836	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.874934912 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.875165939 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.875231981 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.912775993 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.912775993 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.912811041 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.912842035 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.915131092 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.915143013 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.915169001 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.915169954 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.915251970 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.915303946 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.915385008 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.915394068 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.915508986 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.915518045 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.941281080 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.941715002 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.941746950 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.941812992 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.942071915 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:22.942136049 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.942172050 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:22.942178011 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:22.942612886 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.943028927 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:22.943147898 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.943188906 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:22.943211079 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:22.943257093 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.984175920 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:22.995244026 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.995557070 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:22.995629072 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.996128082 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:22.996834040 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:22.996928930 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.031342030 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.031420946 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.031487942 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.031625032 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.031641960 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.031653881 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.031660080 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.034288883 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.034328938 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.034468889 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.034641981 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.034657001 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.045751095 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:23.148099899 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.148366928 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.148469925 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.148469925 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.148602009 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.148622036 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.151150942 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.151186943 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.151256084 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.151396036 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.151402950 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.388190031 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.388375044 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.388423920 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.389235973 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.389256954 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.389269114 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.389276981 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.392673016 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.392771959 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.392847061 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.393043995 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:23.393076897 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:23.856152058 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.856218100 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.856287956 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:23.856370926 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.856429100 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:23.887146950 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.887190104 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.887298107 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:23.887341022 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.903644085 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.903760910 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:23.903779984 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:23.903851032 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.069000959 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.069134951 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.069199085 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.089910030 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.090030909 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.090091944 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.112020016 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.112123966 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.112158060 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.133177042 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.133202076 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.133296013 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.133310080 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.185168028 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.258269072 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.258294106 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.258351088 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.258399963 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.258445978 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.267944098 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.267963886 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.268001080 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.268043041 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.268081903 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.268090963 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.279921055 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.280009031 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.280021906 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.280188084 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.280236006 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.284519911 CET	49842	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:24.284542084 CET	443	49842	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:24.408118963 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:24.408176899 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:24.408283949 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:24.409027100 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:24.409055948 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:24.705904961 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.706484079 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:24.706505060 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.706952095 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:24.706955910 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.761138916 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.761639118 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:24.761670113 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.762207031 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:24.762211084 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.824234009 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.825047016 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:24.825073957 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.825408936 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:24.825413942 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.874033928 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.874737024 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:24.874752045 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:24.875247955 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:24.875252962 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.163659096 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.163711071 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.163772106 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.163784981 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.163847923 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.163892031 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.171766996 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.171766996 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.171788931 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.171819925 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.175052881 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.175102949 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.175187111 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.175322056 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.175332069 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.219983101 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.220132113 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.220217943 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.233707905 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.233707905 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.233726025 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.233776093 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.251852036 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.251879930 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.251974106 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.252110958 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.252125978 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.256402016 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.259293079 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.259341955 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.259752035 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.259761095 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.270531893 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.270592928 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.270680904 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.271855116 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.271855116 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.271878004 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.271888018 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.294743061 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.294761896 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.294857025 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.295044899 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.295057058 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.447356939 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.447412968 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.447468042 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.447499990 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.447715998 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.447731972 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.447762012 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.448085070 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.448160887 CET	443	49847	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.448205948 CET	49847	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.451433897 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.451478958 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.451545000 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.451797962 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.451812029 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.751544952 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.751579046 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.751632929 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.751673937 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.751827955 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.751890898 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.751902103 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.751926899 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.752127886 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.752182007 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.752219915 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.754755020 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.754854918 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:25.754935980 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.755089998 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:25.755110979 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:26.682015896 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:26.682101011 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:26.683868885 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:26.683886051 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:26.684174061 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:26.685492992 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:26.685555935 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:26.685564041 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:26.685673952 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:26.731323957 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:26.991190910 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:26.991782904 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:26.991846085 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:26.992273092 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:26.992290020 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.015691042 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.016266108 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.016330004 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.016726017 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.016741037 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.049859047 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.050301075 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.050343037 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.050693989 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.050699949 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.254426003 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:27.254467010 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:27.254540920 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:27.255161047 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:27.255175114 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:27.315709114 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.316200972 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.316220045 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.316736937 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.316741943 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.358045101 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:27.358179092 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:27.358237982 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:27.358424902 CET	49850	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:27.358458042 CET	443	49850	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:27.432226896 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.432297945 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.432360888 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.432395935 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.432559967 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.432559967 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.432600021 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.432951927 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.433031082 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.433094978 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.435254097 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.435278893 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.435345888 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.435537100 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.435549974 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.451272011 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.454333067 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.454413891 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.454502106 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.454502106 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.454545021 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.454574108 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.457376003 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.457427979 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.457500935 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.457684994 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.457715034 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.492079973 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.495592117 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.495661974 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.495702028 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.495723963 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.495734930 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.495740891 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.499419928 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.499443054 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.499497890 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.499980927 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.499994993 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.540915012 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.541429996 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.541512966 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.541882992 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.541898012 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.787029982 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.790213108 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.790277958 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.790369987 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.790391922 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.790404081 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.790410042 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.792988062 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.793051004 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.793157101 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.793303013 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.793322086 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.983916044 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.986947060 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.987030983 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.987124920 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.987124920 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.987169981 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.987196922 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.989537001 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.989576101 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:27.989660025 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.989814997 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:27.989829063 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.221055031 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.221546888 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.221569061 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.221942902 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.221947908 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.252547026 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.252891064 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.252939939 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.253293037 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.253307104 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.294601917 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.295015097 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.295026064 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.295366049 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.295368910 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.550950050 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:29.551110983 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:29.552884102 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:29.552895069 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:29.553730965 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:29.555203915 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:29.555260897 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:29.555267096 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:29.555372000 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:29.599328995 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:29.629848957 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.630343914 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.630420923 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.630791903 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.630806923 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.642914057 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.643208981 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.643275976 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.643568993 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.643583059 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.662061930 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.665405989 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.665579081 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.665580034 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.665580034 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.668075085 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.668148041 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.668248892 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.668457985 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.668486118 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.698936939 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.702037096 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.702099085 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.702157974 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.702157974 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.702193975 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.702218056 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.704418898 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.704480886 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.704577923 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.704721928 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.704756021 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.777410984 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.780531883 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.780615091 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.780663967 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.780683041 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.780694008 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.780699015 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.782849073 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.782870054 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.782936096 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.783061028 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.783083916 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:29.980775118 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:29.980808020 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.080744028 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.083811998 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.083908081 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.083991051 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.083992004 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.084034920 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.084060907 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.086605072 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.086639881 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.086751938 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.086884975 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.086896896 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.132731915 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.135696888 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.135796070 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.135868073 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.135868073 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.135890007 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.135910988 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.139225960 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.139262915 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.139336109 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.139473915 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:30.139488935 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:30.249722004 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:30.250200033 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:30.250215054 CET	443	49856	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:30.250252008 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:30.250293970 CET	49856	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:31.461575985 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.462105989 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.462167978 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.462547064 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.462559938 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.554339886 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.554867029 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.554943085 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.555327892 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.555342913 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.568905115 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.569252014 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.569283009 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.569611073 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.569617987 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.940510035 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.941095114 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.941112995 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.941518068 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.941524029 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.998862982 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.999383926 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.999411106 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:31.999867916 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:31.999876022 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.020251036 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.020447969 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.020543098 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.020603895 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.020603895 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.020621061 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.020631075 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.023426056 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.023463964 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.023587942 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.023817062 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.023832083 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.034745932 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.037756920 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.037792921 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.037827015 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.037868977 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.037899971 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.037924051 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.037935972 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.037950039 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.040431023 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.040502071 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.040606022 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.040757895 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.040786982 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.051183939 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.053994894 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.054064989 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.054126024 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.054126024 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.054176092 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.054200888 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.056252003 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.056287050 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.056359053 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.056493044 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.056509018 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.394166946 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.397598028 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.397697926 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.397706985 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.397787094 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.397824049 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.397844076 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.397854090 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.397860050 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.400669098 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.400746107 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.400871992 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.401032925 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.401051998 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.467617035 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.469691038 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.469832897 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.469832897 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.469882011 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.469904900 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.472345114 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.472395897 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:32.472462893 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.472590923 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:32.472599983 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.817338943 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.817893028 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:33.817903996 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.818242073 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:33.818245888 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.867614985 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.871807098 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:33.871823072 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.872466087 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:33.872472048 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.901184082 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.901771069 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:33.901808977 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:33.902168036 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:33.902174950 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.261547089 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.264993906 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.265137911 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.265137911 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.265137911 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.267811060 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.267853022 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.268028021 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.268110037 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.268119097 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.277709007 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.278095007 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.278117895 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.278539896 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.278546095 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.282758951 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.283009052 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.283027887 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.283324957 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.283330917 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.354301929 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.357212067 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.357275963 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.357319117 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.357343912 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.357358932 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.357366085 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.360161066 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.360212088 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.360291958 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.360421896 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.360446930 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.362174988 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.364909887 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.364973068 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.364984989 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.365036011 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.365066051 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.365088940 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.365103006 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.365103006 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.365112066 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.365123987 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.367228985 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.367260933 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.367337942 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.367470026 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.367492914 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.480586052 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.480619907 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.728207111 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.730462074 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.731331110 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.731400013 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.731471062 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.731489897 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.731499910 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.731507063 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.733664036 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.733752966 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.733823061 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.733823061 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.733855009 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.733887911 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.734195948 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.734234095 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.734324932 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.734486103 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.734497070 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.735814095 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.735836029 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:34.735903025 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.736040115 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:34.736054897 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.015763998 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.016290903 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.016309023 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.016731024 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.016745090 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.075083971 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.075532913 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.075551033 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.075938940 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.075943947 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.226731062 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.227370024 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.227391005 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.227861881 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.227869034 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.450697899 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.454268932 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.454421043 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.454502106 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.454524040 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.454538107 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.454554081 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.459558010 CET	49877	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.459651947 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.459728003 CET	49877	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.460053921 CET	49877	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.460089922 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.511251926 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.514261007 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.514386892 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.514413118 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.514537096 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.514565945 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.514584064 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.514595032 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.514600039 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.517507076 CET	49878	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.517541885 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.517616987 CET	49878	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.517846107 CET	49878	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.517863035 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.518142939 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.518676996 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.518695116 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.519058943 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.519064903 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.521388054 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.521728039 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.521737099 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.522190094 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.522196054 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.681796074 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.684932947 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.684989929 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.685101986 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.685122967 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.685134888 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.685142994 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.688209057 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.688241959 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.688302994 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.688442945 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.688450098 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.963651896 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.965631962 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.966784000 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.966835022 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.966885090 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.966970921 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.967108965 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.967118979 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.968715906 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.968786955 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.968827009 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.968852043 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.968867064 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.968873024 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.969926119 CET	49880	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.969970942 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.970074892 CET	49880	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.970184088 CET	49880	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.970200062 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.971060038 CET	49881	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.971112967 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:36.971185923 CET	49881	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.971349001 CET	49881	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:36.971381903 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:37.155911922 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:37.155961990 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:37.156066895 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:37.157016039 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:37.157033920 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:38.182826996 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.183468103 CET	49877	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.183535099 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.183963060 CET	49877	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.183979988 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.258694887 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.259207964 CET	49878	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.259233952 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.259674072 CET	49878	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.259680986 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.477076054 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.477644920 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.477698088 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.478125095 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.478138924 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.618077040 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.621289968 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.621387005 CET	49877	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.621546984 CET	49877	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.621546984 CET	49877	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.621587992 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.621614933 CET	443	49877	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.625066042 CET	49883	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.625139952 CET	443	49883	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.625245094 CET	49883	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.625403881 CET	49883	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.625422955 CET	443	49883	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.697782040 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.700958967 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.701021910 CET	49878	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.701067924 CET	49878	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.701086998 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.701097012 CET	49878	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.701102972 CET	443	49878	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.703902960 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.704003096 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.704106092 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.704257965 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.704293013 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.721857071 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.722282887 CET	49881	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.722322941 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.722887993 CET	49881	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.722899914 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.756757975 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.757253885 CET	49880	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.757294893 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.757833004 CET	49880	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.757841110 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.878751040 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:38.878923893 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:38.892345905 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:38.892369986 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:38.893260002 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:38.894984961 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:38.920972109 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.924026012 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.924118042 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.924134016 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.924201965 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.924273014 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.924288988 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.924299955 CET	49879	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.924304962 CET	443	49879	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.927623034 CET	49885	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.927716017 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.927815914 CET	49885	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.928050995 CET	49885	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:38.928080082 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:38.935342073 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.160851955 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.163983107 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.164093018 CET	49881	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.164180040 CET	49881	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.164197922 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.164213896 CET	49881	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.164221048 CET	443	49881	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.167632103 CET	49886	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.167694092 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.167804956 CET	49886	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.168204069 CET	49886	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.168236017 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.202636957 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.206134081 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.206239939 CET	49880	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.206310034 CET	49880	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.206310034 CET	49880	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.206351042 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.206379890 CET	443	49880	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.210222006 CET	49887	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.210304022 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.210395098 CET	49887	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.210603952 CET	49887	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:39.210640907 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:39.566308975 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.566374063 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.566417933 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.566515923 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:39.566515923 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:39.566536903 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.566632032 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:39.603265047 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.603353977 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:39.603358984 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.603410006 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.603452921 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:39.603522062 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.603532076 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:39.603573084 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.603576899 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:39.603576899 CET	49882	443	192.168.2.5	172.202.163.200
Nov 21, 2024 19:34:39.603604078 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:39.603616953 CET	443	49882	172.202.163.200	192.168.2.5
Nov 21, 2024 19:34:40.481245995 CET	443	49883	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.481812954 CET	49883	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.481915951 CET	443	49883	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.482280970 CET	49883	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.482297897 CET	443	49883	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.489896059 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.490317106 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.490397930 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.490669966 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.490685940 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.725126982 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.725737095 CET	49885	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.725815058 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.726208925 CET	49885	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.726224899 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.941699028 CET	443	49883	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.943392992 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.944674969 CET	443	49883	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.944786072 CET	49883	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.944787025 CET	49883	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.944885015 CET	49883	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.944925070 CET	443	49883	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.946427107 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.946485996 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.946516991 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.946580887 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.947407961 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.947443008 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.947464943 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.947464943 CET	49884	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.947505951 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.947506905 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.947532892 CET	443	49884	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.948810101 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.948834896 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.950124025 CET	49889	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.950156927 CET	443	49889	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.950325966 CET	49889	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.950325966 CET	49889	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.950350046 CET	443	49889	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.966433048 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.966862917 CET	49886	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.966905117 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:40.967291117 CET	49886	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:40.967303991 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.008707047 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.009432077 CET	49887	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.009460926 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.009972095 CET	49887	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.009985924 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.248462915 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.248527050 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.248594999 CET	49885	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.248796940 CET	49885	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.248814106 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.248825073 CET	49885	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.248828888 CET	443	49885	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.251677990 CET	49890	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.251710892 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.251796961 CET	49890	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.251990080 CET	49890	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.252006054 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.410418034 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.410582066 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.410654068 CET	49886	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.410789967 CET	49886	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.410835981 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.410866022 CET	49886	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.410882950 CET	443	49886	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.413687944 CET	49891	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.413708925 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.413825035 CET	49891	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.413954020 CET	49891	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.413959980 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.458594084 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.461718082 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.461777925 CET	49887	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.461838961 CET	49887	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.461844921 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.461854935 CET	49887	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.461858988 CET	443	49887	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.464416981 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.464453936 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:41.464540005 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.464652061 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:41.464667082 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.733592033 CET	443	49889	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.734088898 CET	49889	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:42.734106064 CET	443	49889	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.734635115 CET	49889	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:42.734642029 CET	443	49889	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.771365881 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.771871090 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:42.771893024 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.772254944 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:42.772262096 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.913045883 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.913666964 CET	49890	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:42.913688898 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:42.913995981 CET	49890	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:42.914001942 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.226578951 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.228929043 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.229067087 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.229144096 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.229144096 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.229203939 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.229203939 CET	49888	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.229228020 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.229239941 CET	443	49888	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.232240915 CET	49893	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.232274055 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.232347012 CET	49893	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.232487917 CET	49893	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.232501984 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.233402967 CET	443	49889	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.246747017 CET	443	49889	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.246845961 CET	49889	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.246845961 CET	49889	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.246874094 CET	49889	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.246881962 CET	443	49889	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.249334097 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.249401093 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.249488115 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.249608994 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.249633074 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.281502008 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.281989098 CET	49891	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.281996965 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.282433987 CET	49891	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.282438040 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.309530973 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.311633110 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.311650038 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.312068939 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.312072992 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.361566067 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.364948034 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.365050077 CET	49890	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.365138054 CET	49890	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.365138054 CET	49890	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.365160942 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.365173101 CET	443	49890	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.367870092 CET	49895	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.367947102 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.368051052 CET	49895	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.368213892 CET	49895	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.368246078 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.734366894 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.736954927 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.737066984 CET	49891	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.737095118 CET	49891	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.737107038 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.737116098 CET	49891	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.737119913 CET	443	49891	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.739998102 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.740081072 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.740179062 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.740339994 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.740371943 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.762576103 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.766105890 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.766196012 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.766236067 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.766271114 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.766333103 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.766386986 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.766386986 CET	49892	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.766436100 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.766448021 CET	443	49892	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.768987894 CET	49897	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.769062042 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:43.769160986 CET	49897	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.769280910 CET	49897	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:43.769308090 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.015790939 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.016371965 CET	49893	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.016417027 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.016820908 CET	49893	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.016834974 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.033845901 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.034224987 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.034239054 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.034636021 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.034641027 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.156579018 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.157087088 CET	49895	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.157125950 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.157536983 CET	49895	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.157548904 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.459705114 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.462748051 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.462857008 CET	49893	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.462940931 CET	49893	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.462940931 CET	49893	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.462982893 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.463011026 CET	443	49893	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.465846062 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.465907097 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.466001987 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.466161966 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.466192961 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.480511904 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.483309031 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.483370066 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.483393908 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.483455896 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.483501911 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.483501911 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.483525991 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.483551979 CET	49894	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.483567953 CET	443	49894	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.483963966 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.484596014 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.484635115 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.485064030 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.485079050 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.486454010 CET	49900	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.486483097 CET	443	49900	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.486546993 CET	49900	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.486687899 CET	49900	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.486705065 CET	443	49900	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.498941898 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.499303102 CET	49897	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.499344110 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.499747992 CET	49897	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.499759912 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.601003885 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.604248047 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.604325056 CET	49895	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.604408979 CET	49895	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.604437113 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.604465008 CET	49895	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.604479074 CET	443	49895	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.608530998 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.608618975 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:45.608711004 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.608912945 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:45.608947039 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.036916018 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.037007093 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.037111998 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.037159920 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.037271976 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.037648916 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.037674904 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.037719965 CET	49896	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.037734032 CET	443	49896	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.040504932 CET	49902	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.040529966 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.040618896 CET	49902	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.040796995 CET	49902	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.040808916 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.064341068 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.064419031 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.064479113 CET	49897	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.064630032 CET	49897	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.064651966 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.064702988 CET	49897	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.064718962 CET	443	49897	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.067514896 CET	49903	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.067580938 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:46.067683935 CET	49903	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.067837954 CET	49903	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:46.067867994 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.513354063 CET	443	49900	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.513916016 CET	49900	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.513984919 CET	443	49900	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.514394999 CET	49900	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.514410973 CET	443	49900	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.591696024 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.592261076 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.592302084 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.592725039 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.592736959 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.601411104 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.601819038 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.601867914 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.602175951 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.602194071 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.808629036 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.809195995 CET	49903	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.809237957 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.809657097 CET	49903	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.809669971 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.890397072 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.891006947 CET	49902	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.891057014 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.891506910 CET	49902	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.891521931 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.957536936 CET	443	49900	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.960697889 CET	443	49900	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.960817099 CET	49900	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.960973978 CET	49900	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.960984945 CET	443	49900	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.963924885 CET	49904	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.963968992 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:47.964047909 CET	49904	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.964188099 CET	49904	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:47.964205027 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.045253992 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.047768116 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.048052073 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.048120022 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.048161030 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.048192978 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.048264027 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.048320055 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.048320055 CET	49899	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.048343897 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.048366070 CET	443	49899	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.050666094 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.050733089 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.050745964 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.050781965 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.050836086 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.050863028 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.050863028 CET	49901	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.050873995 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.050883055 CET	443	49901	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.051464081 CET	49905	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.051512003 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.051588058 CET	49905	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.051770926 CET	49905	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.051796913 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.053131104 CET	49906	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.053162098 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.053242922 CET	49906	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.053380013 CET	49906	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.053407907 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.250813007 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.250967979 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.251024008 CET	49903	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.253962994 CET	49903	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.253981113 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.253997087 CET	49903	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.254004002 CET	443	49903	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.257597923 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.257632971 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.257709980 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.257853985 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.257865906 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.344342947 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.347332001 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.347423077 CET	49902	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.347481012 CET	49902	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.347481012 CET	49902	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.347512960 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.347537041 CET	443	49902	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.350222111 CET	49908	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.350253105 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:48.350347996 CET	49908	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.350514889 CET	49908	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:48.350531101 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.638545990 CET	49909	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:34:49.638585091 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:49.638792992 CET	49909	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:34:49.638905048 CET	49909	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:34:49.638923883 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:49.785234928 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.785758972 CET	49904	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:49.785794020 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.786216974 CET	49904	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:49.786230087 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.864453077 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.866003036 CET	49905	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:49.866050005 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.866377115 CET	49905	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:49.866381884 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.867346048 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.869844913 CET	49906	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:49.869864941 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:49.870209932 CET	49906	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:49.870217085 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.190695047 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.191281080 CET	49908	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.191323996 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.191768885 CET	49908	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.191783905 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.200683117 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.201050043 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.201071024 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.201451063 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.201456070 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.303620100 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.306627989 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.306706905 CET	49904	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.306796074 CET	49904	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.306797028 CET	49904	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.306843996 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.306871891 CET	443	49904	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.308526039 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.309959888 CET	49910	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.310003996 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.310072899 CET	49910	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.310127974 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.310239077 CET	49910	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.310257912 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.311781883 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.311837912 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.311903000 CET	49905	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.311959028 CET	49905	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.311975002 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.311985016 CET	49905	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.311990023 CET	443	49905	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.313606977 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.313986063 CET	49911	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.314013004 CET	49906	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.314042091 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.314059973 CET	49906	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.314059973 CET	49906	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.314075947 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.314095020 CET	443	49906	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.314157009 CET	49911	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.314346075 CET	49911	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.314373016 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.315809011 CET	49912	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.315830946 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.317730904 CET	49912	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.317838907 CET	49912	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.317845106 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.437441111 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:50.437478065 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:50.437681913 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:50.438287020 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:50.438302040 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:50.634510040 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.634668112 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.634752035 CET	49908	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.634999990 CET	49908	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.634999990 CET	49908	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.635042906 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.635071039 CET	443	49908	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.637928009 CET	49914	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.637949944 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.638058901 CET	49914	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.638164997 CET	49914	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.638170958 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.660206079 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.660238028 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.660284996 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.660331011 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.660372972 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.660677910 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.660701036 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.660711050 CET	49907	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.660716057 CET	443	49907	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.663465023 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.663506985 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:50.663589954 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.663805008 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:50.663824081 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:51.347125053 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:51.347495079 CET	49909	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:34:51.347511053 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:51.348658085 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:51.349020958 CET	49909	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:34:51.349196911 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:34:51.402158022 CET	49909	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:34:52.113054991 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.113600969 CET	49910	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.113672972 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.114078999 CET	49910	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.114098072 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.119812965 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.120054960 CET	49912	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.120075941 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.120419979 CET	49912	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.120429993 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.125663996 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.126251936 CET	49911	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.126312017 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.126705885 CET	49911	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.126719952 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.445830107 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.446324110 CET	49914	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.446352959 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.446826935 CET	49914	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.446832895 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.461457014 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.462096930 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.462110996 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.462373018 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.462377071 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.744133949 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.744152069 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.747397900 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.747401953 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.747514963 CET	49911	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.747602940 CET	49911	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.747602940 CET	49911	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.747646093 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.747675896 CET	443	49911	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.747694016 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.747766018 CET	49910	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.747847080 CET	49910	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.747847080 CET	49910	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.747889996 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.747920990 CET	443	49910	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.750534058 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.750592947 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.750600100 CET	49916	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.750624895 CET	49912	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.750660896 CET	49917	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.750670910 CET	49912	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.750700951 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.750706911 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.750730991 CET	49912	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.750744104 CET	443	49912	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.750767946 CET	49917	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.750808001 CET	49916	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.750901937 CET	49917	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.750917912 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.751013994 CET	49916	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.751049995 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.752913952 CET	49918	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.752938986 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.753025055 CET	49918	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.753160000 CET	49918	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.753180027 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.842150927 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:52.842253923 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:52.844074965 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:52.844084978 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:52.844331026 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:52.845568895 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:52.845637083 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:52.845643997 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:52.845791101 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:52.887372971 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:52.894885063 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.897903919 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.897985935 CET	49914	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.898008108 CET	49914	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.898016930 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.898030043 CET	49914	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.898036003 CET	443	49914	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.900648117 CET	49919	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.900697947 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.900779009 CET	49919	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.900904894 CET	49919	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.900916100 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.912404060 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.912432909 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.912477016 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.912486076 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.912621975 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.912683964 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.912683964 CET	49915	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.912703037 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.912713051 CET	443	49915	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.914936066 CET	49920	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.914975882 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:52.915065050 CET	49920	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.915232897 CET	49920	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:52.915261984 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:53.401953936 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:53.402045965 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:53.402131081 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:53.402360916 CET	49913	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:53.402375937 CET	443	49913	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:53.941704988 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:53.941751003 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:53.941853046 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:53.942442894 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:53.942473888 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:54.546705008 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.547207117 CET	49917	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.547221899 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.547650099 CET	49917	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.547657013 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.547727108 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.547996998 CET	49918	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.548049927 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.548430920 CET	49918	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.548445940 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.550271034 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.550633907 CET	49916	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.550649881 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.551063061 CET	49916	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.551074028 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.622100115 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.622559071 CET	49919	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.622570992 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.623058081 CET	49919	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.623064041 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.819411039 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.819947004 CET	49920	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.819978952 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.820410013 CET	49920	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.820421934 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.994832993 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.996501923 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.997967958 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.998138905 CET	49917	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.998620033 CET	49917	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.998642921 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.998666048 CET	49917	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.998672962 CET	443	49917	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.999504089 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:54.999599934 CET	49916	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.999923944 CET	49916	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:54.999969006 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.000022888 CET	49916	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.000039101 CET	443	49916	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.001607895 CET	49924	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.001688004 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.001807928 CET	49924	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.001919985 CET	49925	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.001935959 CET	49924	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.001967907 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.001977921 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.002051115 CET	49925	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.002203941 CET	49925	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.002238035 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.004417896 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.005687952 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.005744934 CET	49918	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.005784035 CET	49918	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.005784035 CET	49918	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.005801916 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.005822897 CET	443	49918	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.007757902 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.007786036 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.007867098 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.007988930 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.008013964 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.057296038 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.060636997 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.060712099 CET	49919	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.060766935 CET	49919	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.060781002 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.060792923 CET	49919	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.060800076 CET	443	49919	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.063425064 CET	49927	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.063463926 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.063544035 CET	49927	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.063671112 CET	49927	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.063694954 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.114022970 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:55.114068985 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:55.114121914 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:55.283304930 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.283576965 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.283657074 CET	49920	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.283710003 CET	49920	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.283727884 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.283756971 CET	49920	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.283771038 CET	443	49920	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.286341906 CET	49929	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.286381006 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.286453962 CET	49929	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.286586046 CET	49929	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:55.286600113 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:55.825054884 CET	49930	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:55.825122118 CET	443	49930	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:55.825211048 CET	49930	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:55.825833082 CET	49930	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:55.825860023 CET	443	49930	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.066659927 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.066685915 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.066747904 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.066755056 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.066785097 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.066797972 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.066852093 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.066890001 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.066890001 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.066925049 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.209198952 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:56.209342957 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:56.211811066 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:56.211843014 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:56.212117910 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:56.213956118 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:56.214019060 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:56.214031935 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:56.214178085 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:56.228287935 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.228394985 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.228437901 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.253088951 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.253230095 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.253252029 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.259330034 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:56.277954102 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.278069973 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.278096914 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.310569048 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.310683966 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.310728073 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.357022047 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.426400900 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.426412106 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.426482916 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.426657915 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.426659107 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.446544886 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.446556091 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.446782112 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.446804047 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.460009098 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.460108042 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.460113049 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.460166931 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.487307072 CET	49841	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:56.487360001 CET	443	49841	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:56.794766903 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.795908928 CET	49925	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:56.795967102 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.796669960 CET	49925	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:56.796681881 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.857485056 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.857975006 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:56.858043909 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.858557940 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:56.858573914 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.884090900 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:56.884162903 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.884175062 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:56.884252071 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:56.884442091 CET	49921	443	192.168.2.5	20.198.118.190
Nov 21, 2024 19:34:56.884500027 CET	443	49921	20.198.118.190	192.168.2.5
Nov 21, 2024 19:34:56.885087967 CET	49924	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:56.885133028 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.885556936 CET	49924	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:56.885569096 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.915204048 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.915693998 CET	49927	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:56.915738106 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:56.916302919 CET	49927	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:56.916311979 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.077164888 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.077658892 CET	49929	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.077675104 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.078131914 CET	49929	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.078136921 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.253766060 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.253844023 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.253962040 CET	49925	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.254107952 CET	49925	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.254153013 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.254205942 CET	49925	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.254224062 CET	443	49925	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.257054090 CET	49934	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.257148981 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.257246017 CET	49934	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.257407904 CET	49934	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.257442951 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.304754019 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.307959080 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.308072090 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.308135986 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.308202982 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.308202982 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.308227062 CET	49926	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.308249950 CET	443	49926	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.311114073 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.311162949 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.311235905 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.311366081 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.311381102 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.345773935 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.348967075 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.349026918 CET	49924	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.349123955 CET	49924	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.349159956 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.349193096 CET	49924	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.349205971 CET	443	49924	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.351901054 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.351943970 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.351999998 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.352171898 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.352190971 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.373483896 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.376508951 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.376595974 CET	49927	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.376787901 CET	49927	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.376787901 CET	49927	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.376831055 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.376858950 CET	443	49927	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.379183054 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.379215956 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.379301071 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.379462004 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.379475117 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.478343010 CET	443	49930	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:57.478696108 CET	49930	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:57.478761911 CET	443	49930	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:57.479924917 CET	443	49930	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:57.480359077 CET	49930	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:57.480545998 CET	443	49930	13.107.136.10	192.168.2.5
Nov 21, 2024 19:34:57.523955107 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.527189970 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.527291059 CET	49929	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.527384043 CET	49930	443	192.168.2.5	13.107.136.10
Nov 21, 2024 19:34:57.527432919 CET	49929	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.527441978 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.527462959 CET	49929	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.527467012 CET	443	49929	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.531625032 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.531651974 CET	443	49938	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:57.531743050 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.531882048 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:57.531893015 CET	443	49938	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.041409969 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.042316914 CET	49934	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.042414904 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.042781115 CET	49934	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.042798042 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.133157969 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.133874893 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.133893967 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.134361982 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.134368896 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.158129930 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.158545017 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.158569098 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.158962965 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.158968925 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.190548897 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.191148996 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.191195965 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.191622972 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.191629887 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.379307032 CET	443	49938	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.379990101 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.380012035 CET	443	49938	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.380453110 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.380460978 CET	443	49938	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.492635012 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.495706081 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.495794058 CET	49934	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.495850086 CET	49934	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.495850086 CET	49934	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.495887995 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.495910883 CET	443	49934	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.499181986 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.499234915 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.499330997 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.499506950 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.499524117 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.580646038 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.583328962 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.583393097 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.583410025 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.583472967 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.583534002 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.583556890 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.583576918 CET	49936	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.583584070 CET	443	49936	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.586397886 CET	49940	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.586443901 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.586527109 CET	49940	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.586657047 CET	49940	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.586674929 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.614456892 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.614475012 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.614579916 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.614597082 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.614870071 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.614876032 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.614897013 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.615034103 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.615062952 CET	443	49935	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.615104914 CET	49935	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.617605925 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.617664099 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.617739916 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.617872953 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.617896080 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.644256115 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.647406101 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.647473097 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.647485971 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.647546053 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.647584915 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.647603035 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.647617102 CET	49937	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.647622108 CET	443	49937	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.650398970 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.650425911 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.650516987 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.650682926 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.650693893 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.834680080 CET	443	49938	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.837975025 CET	443	49938	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.838197947 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.838197947 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.838197947 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.840926886 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.840990067 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:34:59.841063976 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.841202021 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:34:59.841221094 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:00.153558016 CET	49938	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:00.153585911 CET	443	49938	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.040318012 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:35:01.040388107 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:35:01.040472984 CET	49909	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:35:01.323611975 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.324352026 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.324377060 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.324829102 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.324835062 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.399770975 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.400275946 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.400326967 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.400681973 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.400696039 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.433528900 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.434142113 CET	49940	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.434159040 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.434751034 CET	49940	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.434757948 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.437228918 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.437555075 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.437571049 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.437901974 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.437906981 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.530764103 CET	49909	443	192.168.2.5	142.250.181.100
Nov 21, 2024 19:35:01.530796051 CET	443	49909	142.250.181.100	192.168.2.5
Nov 21, 2024 19:35:01.630172014 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.630736113 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.630831003 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.631182909 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.631198883 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.767999887 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.771164894 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.771212101 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.771332026 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.771332026 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.774082899 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.774084091 CET	49939	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.774089098 CET	49944	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.774097919 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.774107933 CET	443	49939	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.774137974 CET	443	49944	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.774225950 CET	49944	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.774369955 CET	49944	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.774379969 CET	443	49944	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.845864058 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.845887899 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.845935106 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.845946074 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.846004963 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.846116066 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.846116066 CET	49941	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.846155882 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.846183062 CET	443	49941	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.848524094 CET	49945	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.848614931 CET	443	49945	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.848696947 CET	49945	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.848819971 CET	49945	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.848843098 CET	443	49945	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.880732059 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.883929014 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.884032011 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.884032011 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.884042978 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.884058952 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.884124994 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.884138107 CET	49942	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.884152889 CET	443	49942	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.886629105 CET	49946	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.886663914 CET	443	49946	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.886735916 CET	49946	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.886780977 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.886873960 CET	49946	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.886888981 CET	443	49946	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.890285969 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.890361071 CET	49940	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.890379906 CET	49940	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.890384912 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.890405893 CET	49940	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.890408993 CET	443	49940	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.892563105 CET	49947	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.892592907 CET	443	49947	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:01.892724037 CET	49947	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.892935038 CET	49947	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:01.892961025 CET	443	49947	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:02.077752113 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:02.080703020 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:02.080768108 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:02.080826998 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:02.080863953 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:02.080924988 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:02.080971003 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:02.081001043 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:02.081026077 CET	49943	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:02.081039906 CET	443	49943	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:02.083704948 CET	49948	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:02.083739996 CET	443	49948	13.107.246.63	192.168.2.5
Nov 21, 2024 19:35:02.083815098 CET	49948	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:02.083981037 CET	49948	443	192.168.2.5	13.107.246.63
Nov 21, 2024 19:35:02.084007978 CET	443	49948	13.107.246.63	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2024 19:33:45.186067104 CET	53	57716	1.1.1.1	192.168.2.5
Nov 21, 2024 19:33:45.331814051 CET	53	55902	1.1.1.1	192.168.2.5
Nov 21, 2024 19:33:46.425735950 CET	59619	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:33:46.426342010 CET	53777	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:33:48.137669086 CET	53	65453	1.1.1.1	192.168.2.5
Nov 21, 2024 19:33:49.576316118 CET	51635	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:33:49.576884031 CET	63932	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:33:49.713520050 CET	53	51635	1.1.1.1	192.168.2.5
Nov 21, 2024 19:33:49.717607975 CET	53	63932	1.1.1.1	192.168.2.5
Nov 21, 2024 19:33:50.625741005 CET	60517	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:33:50.626355886 CET	64869	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:33:54.516164064 CET	57492	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:33:54.516298056 CET	50190	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:33:54.766830921 CET	53	53033	1.1.1.1	192.168.2.5
Nov 21, 2024 19:33:55.537808895 CET	53	63824	1.1.1.1	192.168.2.5
Nov 21, 2024 19:34:05.293164015 CET	53	51968	1.1.1.1	192.168.2.5
Nov 21, 2024 19:34:24.177166939 CET	53	60032	1.1.1.1	192.168.2.5
Nov 21, 2024 19:34:45.105066061 CET	53	51076	1.1.1.1	192.168.2.5
Nov 21, 2024 19:34:47.059175968 CET	53	60471	1.1.1.1	192.168.2.5
Nov 21, 2024 19:34:54.529211044 CET	57194	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:34:54.529377937 CET	54712	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:34:55.107081890 CET	58952	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:34:55.107218027 CET	57328	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:34:56.617705107 CET	55958	53	192.168.2.5	1.1.1.1
Nov 21, 2024 19:34:56.617839098 CET	51502	53	192.168.2.5	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 21, 2024 19:33:54.930789948 CET	192.168.2.5	1.1.1.1	c280	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 21, 2024 19:33:46.425735950 CET	192.168.2.5	1.1.1.1	0x243b	Standard query (0)	chamberlinarchitects-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:46.426342010 CET	192.168.2.5	1.1.1.1	0xb41f	Standard query (0)	chamberlinarchitects-my.sharepoint.com	65	IN (0x0001)	false
Nov 21, 2024 19:33:49.576316118 CET	192.168.2.5	1.1.1.1	0x845c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:49.576884031 CET	192.168.2.5	1.1.1.1	0x16bf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 21, 2024 19:33:50.625741005 CET	192.168.2.5	1.1.1.1	0x668c	Standard query (0)	chamberlinarchitects-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:50.626355886 CET	192.168.2.5	1.1.1.1	0x2826	Standard query (0)	chamberlinarchitects-my.sharepoint.com	65	IN (0x0001)	false
Nov 21, 2024 19:33:54.516164064 CET	192.168.2.5	1.1.1.1	0x392a	Standard query (0)	spo.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:54.516298056 CET	192.168.2.5	1.1.1.1	0x9783	Standard query (0)	spo.nel.measure.office.net	65	IN (0x0001)	false
Nov 21, 2024 19:34:54.529211044 CET	192.168.2.5	1.1.1.1	0x8422	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:34:54.529377937 CET	192.168.2.5	1.1.1.1	0x6d12	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Nov 21, 2024 19:34:55.107081890 CET	192.168.2.5	1.1.1.1	0x1e07	Standard query (0)	chamberlinarchitects-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:34:55.107218027 CET	192.168.2.5	1.1.1.1	0xf9db	Standard query (0)	chamberlinarchitects-my.sharepoint.com	65	IN (0x0001)	false
Nov 21, 2024 19:34:56.617705107 CET	192.168.2.5	1.1.1.1	0xfec4	Standard query (0)	spo.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:34:56.617839098 CET	192.168.2.5	1.1.1.1	0x6f0	Standard query (0)	spo.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 21, 2024 19:33:47.059674978 CET	1.1.1.1	192.168.2.5	0xb41f	No error (0)	chamberlinarchitects-my.sharepoint.com	chamberlinarchitects.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.059674978 CET	1.1.1.1	192.168.2.5	0xb41f	No error (0)	chamberlinarchitects.sharepoint.com	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.059674978 CET	1.1.1.1	192.168.2.5	0xb41f	No error (0)	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.059674978 CET	1.1.1.1	192.168.2.5	0xb41f	No error (0)	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.201054096 CET	1.1.1.1	192.168.2.5	0x243b	No error (0)	chamberlinarchitects-my.sharepoint.com	chamberlinarchitects.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.201054096 CET	1.1.1.1	192.168.2.5	0x243b	No error (0)	chamberlinarchitects.sharepoint.com	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.201054096 CET	1.1.1.1	192.168.2.5	0x243b	No error (0)	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.201054096 CET	1.1.1.1	192.168.2.5	0x243b	No error (0)	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.201054096 CET	1.1.1.1	192.168.2.5	0x243b	No error (0)	193587-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:47.201054096 CET	1.1.1.1	192.168.2.5	0x243b	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:47.201054096 CET	1.1.1.1	192.168.2.5	0x243b	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:49.713520050 CET	1.1.1.1	192.168.2.5	0x845c	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:49.717607975 CET	1.1.1.1	192.168.2.5	0x16bf	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 21, 2024 19:33:50.764647007 CET	1.1.1.1	192.168.2.5	0x668c	No error (0)	chamberlinarchitects-my.sharepoint.com	chamberlinarchitects.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:50.764647007 CET	1.1.1.1	192.168.2.5	0x668c	No error (0)	chamberlinarchitects.sharepoint.com	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:50.764647007 CET	1.1.1.1	192.168.2.5	0x668c	No error (0)	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:50.764647007 CET	1.1.1.1	192.168.2.5	0x668c	No error (0)	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:50.764647007 CET	1.1.1.1	192.168.2.5	0x668c	No error (0)	193587-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:50.764647007 CET	1.1.1.1	192.168.2.5	0x668c	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:50.764647007 CET	1.1.1.1	192.168.2.5	0x668c	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:33:50.766333103 CET	1.1.1.1	192.168.2.5	0x2826	No error (0)	chamberlinarchitects-my.sharepoint.com	chamberlinarchitects.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:50.766333103 CET	1.1.1.1	192.168.2.5	0x2826	No error (0)	chamberlinarchitects.sharepoint.com	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:50.766333103 CET	1.1.1.1	192.168.2.5	0x2826	No error (0)	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:50.766333103 CET	1.1.1.1	192.168.2.5	0x2826	No error (0)	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:54.658514023 CET	1.1.1.1	192.168.2.5	0x392a	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:33:54.930552006 CET	1.1.1.1	192.168.2.5	0x9783	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:54.669516087 CET	1.1.1.1	192.168.2.5	0x8422	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:54.673953056 CET	1.1.1.1	192.168.2.5	0x6d12	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.610865116 CET	1.1.1.1	192.168.2.5	0xf9db	No error (0)	chamberlinarchitects-my.sharepoint.com	chamberlinarchitects.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.610865116 CET	1.1.1.1	192.168.2.5	0xf9db	No error (0)	chamberlinarchitects.sharepoint.com	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.610865116 CET	1.1.1.1	192.168.2.5	0xf9db	No error (0)	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.610865116 CET	1.1.1.1	192.168.2.5	0xf9db	No error (0)	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.823739052 CET	1.1.1.1	192.168.2.5	0x1e07	No error (0)	chamberlinarchitects-my.sharepoint.com	chamberlinarchitects.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.823739052 CET	1.1.1.1	192.168.2.5	0x1e07	No error (0)	chamberlinarchitects.sharepoint.com	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.823739052 CET	1.1.1.1	192.168.2.5	0x1e07	No error (0)	5811-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.823739052 CET	1.1.1.1	192.168.2.5	0x1e07	No error (0)	193587-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193587-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.823739052 CET	1.1.1.1	192.168.2.5	0x1e07	No error (0)	193587-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:55.823739052 CET	1.1.1.1	192.168.2.5	0x1e07	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:34:55.823739052 CET	1.1.1.1	192.168.2.5	0x1e07	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:34:56.755819082 CET	1.1.1.1	192.168.2.5	0xfec4	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 19:34:56.756292105 CET	1.1.1.1	192.168.2.5	0x6f0	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

chamberlinarchitects-my.sharepoint.com

https:

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49713	40.126.53.21	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:42 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-21 18:33:42 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-21 18:33:43 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Nov 2024 18:32:43 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: ede7401b-031b-4146-b70f-420de89e2d24 PPServer: PPV: 30 H: SN1PEPF0002F8F7 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Nov 2024 18:33:42 GMT Connection: close Content-Length: 1918
2024-11-21 18:33:43 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49714	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4f 44 6e 64 41 72 6d 38 6f 30 36 73 47 47 44 54 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 31 64 63 65 34 35 65 64 64 35 35 61 65 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ODndArm8o06sGGDT.1Context: e51dce45edd55aec
2024-11-21 18:33:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-21 18:33:44 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4f 44 6e 64 41 72 6d 38 6f 30 36 73 47 47 44 54 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 31 64 63 65 34 35 65 64 64 35 35 61 65 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4f 46 46 61 31 31 66 37 53 56 46 49 6c 5a 74 79 37 76 39 6b 75 69 66 6a 65 4f 36 6b 63 6e 77 4a 53 6b 32 54 4f 61 61 30 33 50 62 35 66 73 71 58 6f 51 5a 6e 2f 4e 38 6b 4b 46 2b 47 67 4f 6d 66 46 33 62 4b 79 31 37 34 68 53 68 38 61 54 59 58 62 69 36 35 57 57 79 57 35 38 4b 32 46 6a 41 47 2f 55 79 53 47 69 37 6a 64 33 41 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: ODndArm8o06sGGDT.2Context: e51dce45edd55aec<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWOFFa11f7SVFIlZty7v9kuifjeO6kcnwJSk2TOaa03Pb5fsqXoQZn/N8kKF+GgOmfF3bKy174hSh8aTYXbi65WWyW58K2FjAG/UySGi7jd3At
2024-11-21 18:33:44 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4f 44 6e 64 41 72 6d 38 6f 30 36 73 47 47 44 54 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 31 64 63 65 34 35 65 64 64 35 35 61 65 63 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: ODndArm8o06sGGDT.3Context: e51dce45edd55aec
2024-11-21 18:33:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-21 18:33:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 35 38 62 7a 79 7a 6f 56 67 55 79 4c 36 44 30 71 39 32 42 35 66 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 58bzyzoVgUyL6D0q92B5fw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49715	40.126.53.21	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:45 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-21 18:33:45 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-21 18:33:46 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Nov 2024 18:32:46 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C560_BL2 x-ms-request-id: 19e6e980-d8ce-4a78-ac42-624f9b0e68ff PPServer: PPV: 30 H: BL02EPF0001D7DA V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Nov 2024 18:33:45 GMT Connection: close Content-Length: 11409
2024-11-21 18:33:46 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49716	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:46 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 63 48 31 6d 4c 51 31 6f 45 45 32 50 65 6d 46 69 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 61 33 35 39 33 64 30 39 30 35 33 36 61 31 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: cH1mLQ1oEE2PemFi.1Context: 2a3593d090536a19
2024-11-21 18:33:46 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-21 18:33:46 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 63 48 31 6d 4c 51 31 6f 45 45 32 50 65 6d 46 69 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 61 33 35 39 33 64 30 39 30 35 33 36 61 31 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4f 46 46 61 31 31 66 37 53 56 46 49 6c 5a 74 79 37 76 39 6b 75 69 66 6a 65 4f 36 6b 63 6e 77 4a 53 6b 32 54 4f 61 61 30 33 50 62 35 66 73 71 58 6f 51 5a 6e 2f 4e 38 6b 4b 46 2b 47 67 4f 6d 66 46 33 62 4b 79 31 37 34 68 53 68 38 61 54 59 58 62 69 36 35 57 57 79 57 35 38 4b 32 46 6a 41 47 2f 55 79 53 47 69 37 6a 64 33 41 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: cH1mLQ1oEE2PemFi.2Context: 2a3593d090536a19<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWOFFa11f7SVFIlZty7v9kuifjeO6kcnwJSk2TOaa03Pb5fsqXoQZn/N8kKF+GgOmfF3bKy174hSh8aTYXbi65WWyW58K2FjAG/UySGi7jd3At
2024-11-21 18:33:46 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 63 48 31 6d 4c 51 31 6f 45 45 32 50 65 6d 46 69 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 61 33 35 39 33 64 30 39 30 35 33 36 61 31 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: cH1mLQ1oEE2PemFi.3Context: 2a3593d090536a19<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-21 18:33:47 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-21 18:33:47 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 69 74 4d 73 72 39 6b 66 55 71 59 65 61 6d 37 38 59 62 41 69 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yitMsr9kfUqYeam78YbAiQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:47 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:48 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:47 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 16:37:24 GMT ETag: "0x8DD08B87243495C" x-ms-request-id: b5254561-a01e-0070-0158-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183347Z-178bfbc474bpnd5vhC1NYC4vr400000001x0000000006sa6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:48 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-21 18:33:48 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49726	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:48 UTC	757	OUT	GET /:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9 HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:49 UTC	2014	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69174 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,74,310,2819339,0,1051136,75 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: d52266a1-a035-7000-1c99-65a2b5c507d2 request-id: d52266a1-a035-7000-1c99-65a2b5c507d2 MS-CV: oWYi1TWgAHAcmWWitcUH0g.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ebf6a44c-38f7-48fe-b5a1-af660cd6569a&destinationEndpoint=Edge-Prod-EWR31r5a&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 120 SPIisLatency: 6 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 911CDC90F87848EEB31FD2DEFB52891D Ref B: EWR311000102027 Ref C: 2024-11-21T18:33:49Z Date: Thu, 21 Nov 2024 18:33:49 GMT Connection: close
2024-11-21 18:33:49 UTC	2051	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-21 18:33:49 UTC	8192	IN	Data Raw: 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 Data Ascii: submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}le
2024-11-21 18:33:49 UTC	4249	IN	Data Raw: 65 72 72 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 64 65 37 65 39 7d 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 2e 6d 73 2d 49 63 6f 6e 7b 6d 61 72 67 69 6e 3a 30 20 38 70 78 7d 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 73 70 61 6e 7b 66 6c 65 78 3a 31 20 31 20 31 30 30 25 7d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 Data Ascii: error{background:#fde7e9}.notification .ms-Icon{margin:0 8px}.notification span{flex:1 1 100%}input::-webkit-inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number
2024-11-21 18:33:49 UTC	8192	IN	Data Raw: 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 37 36 36 61 31 37 61 30 2d 33 65 30 36 2d 34 65 35 37 2d 38 65 35 30 2d 30 33 31 39 61 35 31 38 62 39 39 65 22 3e 0d 0a 09 09 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 27 50 65 72 66 6f 72 6d 61 6e 63 65 4c 6f 6e 67 54 61 73 6b 54 69 6d 69 6e 67 27 20 69 6e 20 77 69 6e 64 6f 77 29 7b 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 5f 5f 74 74 69 3d 7b 65 3a 5b 5d 7d 3b 67 2e 6f 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 67 2e 65 3d 67 2e 65 2e 63 6f 6e 63 61 74 28 6c 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 3b 67 2e 6f 2e 6f 62 73 65 72 76 65 28 7b 65 6e 74 72 79 54 79 70 65 73 3a 5b 27 6c 6f 6e 67 74 61 73 6b Data Ascii: ="text/javascript" nonce="766a17a0-3e06-4e57-8e50-0319a518b99e">!function(){if('PerformanceLongTaskTiming' in window){var g=window.__tti={e:[]};g.o=new PerformanceObserver(function(l){g.e=g.e.concat(l.getEntries())});g.o.observe({entryTypes:['longtask
2024-11-21 18:33:49 UTC	8192	IN	Data Raw: 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 45 53 36 50 72 6f 6d 69 73 65 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 73 65 74 54 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 72 2c 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 53 3b 65 2b 3d 32 29 7b Data Ascii: e?module.exports=t():"function"==typeof define&&define.amd?define(t):e.ES6Promise=t()}(this,function(){"use strict";function c(e){return"function"==typeof e}function t(){var e=setTimeout;return function(){return e(r,1)}}function r(){for(var e=0;e<S;e+=2){
2024-11-21 18:33:49 UTC	8192	IN	Data Raw: 65 3d 76 6f 69 64 20 30 7d 72 65 71 3d 72 65 71 75 69 72 65 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 73 3d 64 65 66 43 6f 6e 74 65 78 74 4e 61 6d 65 3b 69 66 28 21 69 73 41 72 72 61 79 28 65 29 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 7b 6f 3d 65 3b 69 66 28 69 73 41 72 72 61 79 28 74 29 29 7b 65 3d 74 3b 74 3d 72 3b 72 3d 6e 7d 65 6c 73 65 20 65 3d 5b 5d 7d 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 28 73 3d 6f 2e 63 6f 6e 74 65 78 74 29 3b 69 3d 28 69 3d 67 65 74 4f 77 6e 28 63 6f 6e 74 65 78 74 73 2c 73 29 29 7c 7c 28 63 6f 6e 74 65 78 74 73 5b 73 5d 3d 72 65 71 2e 73 2e 6e 65 77 43 6f 6e 74 65 78 74 28 73 29 29 3b 6f 26 26 69 2e 63 6f 6e 66 69 67 75 72 65 28 6f 29 3b 72 65 74 75 72 6e Data Ascii: e=void 0}req=requirejs=function(e,t,r,n){var i,o,s=defContextName;if(!isArray(e)&&"string"!=typeof e){o=e;if(isArray(t)){e=t;t=r;r=n}else e=[]}o&&o.context&&(s=o.context);i=(i=getOwn(contexts,s))\|\|(contexts[s]=req.s.newContext(s));o&&i.configure(o);return
2024-11-21 18:33:49 UTC	8192	IN	Data Raw: 75 6c 65 73 3d 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 3f 5b 74 68 69 73 2e 6d 61 70 2e 69 64 5d 3a 6e 75 6c 6c 3b 74 2e 72 65 71 75 69 72 65 54 79 70 65 3d 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 3f 22 64 65 66 69 6e 65 22 3a 22 72 65 71 75 69 72 65 22 3b 72 65 74 75 72 6e 20 6a 28 74 68 69 73 2e 65 72 72 6f 72 3d 74 29 7d 7d 65 6c 73 65 20 69 3d 6f 3b 74 68 69 73 2e 65 78 70 6f 72 74 73 3d 69 3b 69 66 28 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 21 74 68 69 73 2e 69 67 6e 6f 72 65 29 7b 6d 5b 72 5d 3d 69 3b 69 66 28 72 65 71 2e 6f 6e 52 65 73 6f 75 72 63 65 4c 6f 61 64 29 7b 76 61 72 20 73 3d 5b 5d 3b 65 61 63 68 28 74 68 69 73 2e 64 65 70 4d 61 70 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 2e 70 75 73 68 28 65 2e Data Ascii: ules=this.map.isDefine?[this.map.id]:null;t.requireType=this.map.isDefine?"define":"require";return j(this.error=t)}}else i=o;this.exports=i;if(this.map.isDefine&&!this.ignore){m[r]=i;if(req.onResourceLoad){var s=[];each(this.depMaps,function(e){s.push(e.
2024-11-21 18:33:49 UTC	8192	IN	Data Raw: 6c 65 49 64 2c 20 70 61 74 68 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 42 61 63 6b 3b 0d 0a 20 20 20 20 20 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 2e 70 75 73 68 28 6d 6f 64 75 6c 65 49 64 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 20 26 26 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 2e 6c 65 6e 67 74 68 20 3e 3d 20 32 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 64 20 69 6e 20 70 61 74 68 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 74 65 6d 73 20 3d 20 70 61 74 68 73 5b 69 64 5d 3b 0d Data Ascii: leId, paths) { var failedModules = failOverState.modulesFalledBack; failedModules.push(moduleId); if (!failOverState.baseUrlFailedOver && failedModules.length >= 2) { for (var id in paths) { var items = paths[id];
2024-11-21 18:33:49 UTC	8192	IN	Data Raw: 59 6d 6a 72 4a 30 26 61 6d 70 3b 74 3d 66 66 66 66 66 66 66 66 62 32 30 31 66 64 33 66 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 4f 6e 53 75 62 6d 69 74 28 29 20 7b 0d 0a 69 66 20 28 74 79 70 65 6f 66 28 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 29 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 28 29 20 3d 3d 20 66 61 6c 73 65 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 69 66 20 28 74 79 70 65 6f 66 28 5f 73 70 46 6f 72 6d 4f 6e 53 75 62 Data Ascii: YmjrJ0&t=ffffffffb201fd3f" type="text/javascript"></script><script type="text/javascript">//<![CDATA[function WebForm_OnSubmit() {if (typeof(ValidatorOnSubmit) == "function" && ValidatorOnSubmit() == false) return false;if (typeof(_spFormOnSub
2024-11-21 18:33:49 UTC	5530	IN	Data Raw: 54 4f 41 41 45 4d 61 69 6c 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 65 76 61 6c 75 61 74 69 6f 6e 66 75 6e 63 74 69 6f 6e 20 3d 20 22 52 65 67 75 6c 61 72 45 78 70 72 65 73 73 69 6f 6e 56 61 6c 69 64 61 74 6f 72 45 76 61 6c 75 61 74 65 49 73 56 61 6c 69 64 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 76 61 6c 69 64 61 74 69 6f 6e 65 78 70 72 65 73 73 69 6f 6e 20 3d 20 22 5e 5b 5e 20 5c 5c 72 5c 5c 74 5c 5c 6e 5c 5c 66 40 5d 2b 40 5b 5e 20 5c 5c 72 5c 5c 74 5c 5c 6e 5c 5c 66 40 5d 2b 24 22 3b 0d 0a 09 76 61 72 20 49 6e 63 6f 72 72 65 63 74 54 4f 41 41 45 4d 61 69 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 61 Data Ascii: TOAAEMail.display = "Dynamic";ValidateTOAAEMail.evaluationfunction = "RegularExpressionValidatorEvaluateIsValid";ValidateTOAAEMail.validationexpression = "^[^ \\r\\t\\n\\f@]+@[^ \\r\\t\\n\\f@]+$";var IncorrectTOAAEMail = document.all ? document.a

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49725	40.126.53.21	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:48 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-21 18:33:48 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-21 18:33:49 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 21 Nov 2024 18:32:49 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C560_SN1 x-ms-request-id: a5a8557e-072c-417c-a450-f20982501a4c PPServer: PPV: 30 H: SN1PEPF0003FB48 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 21 Nov 2024 18:33:48 GMT Connection: close Content-Length: 11409
2024-11-21 18:33:49 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49727	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:49 UTC	784	OUT	GET /WebResource.axd?d=na8NtmOLcH2-PSkhg-2StciQu83Rz6wegHK-qpykqqPXu1zqQgXBjx-1wJcAzcBoT-1lZ2ky9il7sECAMuM_sInK5ihLxbGkxyJG0zE_XUg1&t=638637567397700854 HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:50 UTC	768	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Fri, 21 Nov 2025 14:28:11 GMT Last-Modified: Sun, 06 Oct 2024 03:25:39 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 1,1051136,59,351,3506216,1051136,1051136,56 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2E36305AB62347B690617FEC403B88C8 Ref B: EWR311000108037 Ref C: 2024-11-21T18:33:50Z Date: Thu, 21 Nov 2024 18:33:49 GMT Connection: close
2024-11-21 18:33:50 UTC	1675	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-11-21 18:33:50 UTC	8192	IN	Data Raw: 75 73 2e 76 61 6c 75 65 20 3d 20 61 63 74 69 76 65 2e 6e 61 6d 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 6f 70 74 69 6f 6e 73 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 20 6f 70 74 69 6f 6e 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 76 61 72 20 5f 5f 70 65 6e 64 69 6e 67 43 61 6c 6c 62 Data Ascii: us.value = active.name; } } } } } } if (options.clientSubmit) { __doPostBack(options.eventTarget, options.eventArgument); }}var __pendingCallb
2024-11-21 18:33:50 UTC	5871	IN	Data Raw: 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 20 22 65 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 26 26 20 28 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 28 72 65 73 70 6f 6e 73 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 20 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 63 6f 6e 74 65 78 Data Ascii: } } else if (response.charAt(0) == "e") { if ((typeof(callbackObject.errorCallback) != "undefined") && (callbackObject.errorCallback != null)) { callbackObject.errorCallback(response.substring(1), callbackObject.contex
2024-11-21 18:33:50 UTC	7325	IN	Data Raw: 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d Data Ascii: else { defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonM

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49730	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:50 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 61 73 42 6a 64 4a 69 53 6a 55 43 47 6e 53 6a 42 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 32 36 34 62 30 33 61 36 63 36 36 62 31 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: asBjdJiSjUCGnSjB.1Context: 55264b03a6c66b16
2024-11-21 18:33:50 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-21 18:33:50 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 61 73 42 6a 64 4a 69 53 6a 55 43 47 6e 53 6a 42 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 32 36 34 62 30 33 61 36 63 36 36 62 31 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4f 46 46 61 31 31 66 37 53 56 46 49 6c 5a 74 79 37 76 39 6b 75 69 66 6a 65 4f 36 6b 63 6e 77 4a 53 6b 32 54 4f 61 61 30 33 50 62 35 66 73 71 58 6f 51 5a 6e 2f 4e 38 6b 4b 46 2b 47 67 4f 6d 66 46 33 62 4b 79 31 37 34 68 53 68 38 61 54 59 58 62 69 36 35 57 57 79 57 35 38 4b 32 46 6a 41 47 2f 55 79 53 47 69 37 6a 64 33 41 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: asBjdJiSjUCGnSjB.2Context: 55264b03a6c66b16<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWOFFa11f7SVFIlZty7v9kuifjeO6kcnwJSk2TOaa03Pb5fsqXoQZn/N8kKF+GgOmfF3bKy174hSh8aTYXbi65WWyW58K2FjAG/UySGi7jd3At
2024-11-21 18:33:50 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 61 73 42 6a 64 4a 69 53 6a 55 43 47 6e 53 6a 42 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 35 32 36 34 62 30 33 61 36 63 36 36 62 31 36 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: asBjdJiSjUCGnSjB.3Context: 55264b03a6c66b16
2024-11-21 18:33:50 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-21 18:33:50 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 75 78 5a 63 74 52 42 54 45 53 36 4e 31 4d 77 44 6f 64 35 67 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: tuxZctRBTES6N1MwDod5gQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:50 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:50 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183350Z-178bfbc474bv587zhC1NYCny5w00000001ug000000000988 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:50 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:51 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:50 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aa7a34d-201e-0096-3676-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183350Z-178bfbc474bh5zbqhC1NYCkdug00000001ng000000012q1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:51 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:50 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:51 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:50 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1c744767-001e-0082-6060-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183350Z-178bfbc474btrnf9hC1NYCb80g000000022000000000697h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:51 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:50 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:50 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183350Z-r1d97b99577ckpmjhC1TEBrzs00000000au0000000008kay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:51 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:50 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:51 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:51 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183351Z-178bfbc474bnwsh4hC1NYC2ubs00000001wg00000000mvmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:51 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49745	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:51 UTC	841	OUT	GET /ScriptResource.axd?d=0HLq5DZTTienD8-N_shQw5ZYxJ531YzNJKJqeNebSa9UGEpk7XrdNU5LZl1_olnoHu0CDe9ycImuoEn45XNJjmetCZzaU0o55XDr2ZFHoDvWflGWiVu47vTPmEwdlqv0sJ8G3ZXIwil1J7kRiztKx0uiY-1YgLb3JNPFVPoDEmw1&t=64bd211b HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:52 UTC	767	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 26951 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 21 Nov 2025 13:51:12 GMT Last-Modified: Thu, 21 Nov 2024 13:51:12 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,225,0,26432,60 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 851F317B9688447596357967C21D87B0 Ref B: EWR311000106037 Ref C: 2024-11-21T18:33:51Z Date: Thu, 21 Nov 2024 18:33:51 GMT Connection: close
2024-11-21 18:33:52 UTC	3750	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-11-21 18:33:52 UTC	8192	IN	Data Raw: 76 61 72 20 69 2c 20 76 61 6c 3b 0d 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 3c 63 6f 6e 74 72 6f 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 52 65 63 75 72 73 69 76 65 28 63 6f 6e 74 72 6f 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 20 21 3d 20 22 22 29 20 72 65 74 75 72 6e 20 76 61 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 22 22 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 50 61 67 65 5f 43 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 28 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 20 7b 0d 0a 20 20 20 20 50 61 67 65 5f 49 6e 76 Data Ascii: var i, val; for (i = 0; i<control.childNodes.length; i++) { val = ValidatorGetValueRecursive(control.childNodes[i]); if (val != "") return val; } return "";}function Page_ClientValidate(validationGroup) { Page_Inv
2024-11-21 18:33:52 UTC	3797	IN	Data Raw: 66 20 28 6d 5b 32 5d 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 26 26 20 6d 5b 33 5d 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 6e 49 6e 70 75 74 20 3d 20 28 6d 5b 31 5d 20 21 3d 20 6e 75 6c 6c 20 3f 20 6d 5b 31 5d 20 3a 20 22 22 29 20 2b 20 28 6d 5b 32 5d 2e 6c 65 6e 67 74 68 3e 30 20 3f 20 6d 5b 32 5d 20 3a 20 22 30 22 29 20 2b 20 28 6d 5b 33 5d 2e 6c 65 6e 67 74 68 3e 30 20 3f 20 22 2e 22 20 2b 20 6d 5b 33 5d 20 3a 20 22 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6e 75 6d 20 3d 20 70 61 72 73 65 46 6c 6f 61 74 28 63 6c 65 61 6e 49 6e 70 75 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 69 73 4e 61 4e 28 6e 75 6d 29 20 3f 20 6e 75 Data Ascii: f (m[2].length == 0 && m[3].length == 0) return null; cleanInput = (m[1] != null ? m[1] : "") + (m[2].length>0 ? m[2] : "0") + (m[3].length>0 ? "." + m[3] : ""); num = parseFloat(cleanInput); return (isNaN(num) ? nu
2024-11-21 18:33:52 UTC	8192	IN	Data Raw: 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d 0a 20 20 20 20 20 Data Ascii: .controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined") \|\|
2024-11-21 18:33:52 UTC	3020	IN	Data Raw: 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 6f 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 2b 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 79 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 Data Ascii: var length = parseSpecificAttribute(selector, dataValidationAttribute, Page_Validators); length += parseSpecificAttribute(selector, dataValidationSummaryAttribute, Page_ValidationSummaries); return length; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49743	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:51 UTC	870	OUT	GET /ScriptResource.axd?d=d7AbIk__RR4V2Rx-TSpCKncf6PRukCeYxPNMpbRrp5zNMOFlJr9oc120azlckqN7o7d4gwCiUibzXkmvkXeWZtF2fi6TTziQ1s-2mcuurtyAyZX48_rcdDBS704XVLDt2-erL9E_43IBz_4UGpgmsey82L8U81vqIBPBu5LZmMlrYpSWQ-5vps3h3CUQSLDq0&t=ffffffffb201fd3f HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:54 UTC	316	IN	HTTP/1.1 503 Service Unavailable Cache-Control: no-store Content-Length: 8062 Content-Type: text/html X-Azure-ExternalError: 0x800705b4,DNSTimeout X-MSEdge-Ref: Ref A: 208EE0BFC9924989B33F417C4BD49C49 Ref B: EWR311000103027 Ref C: 2024-11-21T18:33:51Z Date: Thu, 21 Nov 2024 18:33:54 GMT Connection: close
2024-11-21 18:33:54 UTC	8062	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 6e 73 3a 57 65 62 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6c 69 76 65 2e 63 6f 6d 2f 57 65 62 2f 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 53 68 61 72 65 70 6f 69 6e 74 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 Data Ascii: <!DOCTYPE html><html xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" xmlns:Web="http://schemas.live.com/Web/"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>Sharepoint Online</title><meta http-equiv="X-UA-Compatible" c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49744	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:51 UTC	870	OUT	GET /ScriptResource.axd?d=2OhCo73OyGBsu9HtdNMGpaB4ebHC0Wow64z70vEbDX016Q4VYy1TsSAjEcPfwjaseGXT81I9NsCoei6l_F9oV_0TKm0mI3SFi913Q4UdnB0fu5rZPbviFP6dhENUHOrzrf1bzlfqe09JhEJ0uEBltljpPB6xlweZYnXjuc4KC4LTBWkTghrKgddl04vYmjrJ0&t=ffffffffb201fd3f HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:52 UTC	776	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 40326 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 21 Nov 2025 18:33:51 GMT Last-Modified: Thu, 21 Nov 2024 18:33:51 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,0,76,1108689,0,1051136,74 X-AspNet-Version: 4.0.30319 SPRequestDuration: 9 SPIisLatency: 25 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: EE76C44D14C54358BE894DCB0ABD9E36 Ref B: EWR311000102051 Ref C: 2024-11-21T18:33:51Z Date: Thu, 21 Nov 2024 18:33:51 GMT Connection: close
2024-11-21 18:33:52 UTC	1014	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2024-11-21 18:33:52 UTC	8192	IN	Data Raw: 79 73 2e 57 65 62 46 6f 72 6d 73 2e 45 6e 64 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 2e 69 6e 69 74 69 61 6c 69 7a 65 42 61 73 65 28 74 68 69 73 29 3b 74 68 69 73 2e 5f 65 72 72 6f 72 48 61 6e 64 6c 65 64 3d 66 61 6c 73 65 3b 74 68 69 73 2e 5f 65 72 72 6f 72 3d 63 3b 74 68 69 73 2e 5f 64 61 74 61 49 74 65 6d 73 3d 61 7c 7c 7b 7d 3b 74 68 69 73 2e 5f 72 65 73 70 6f 6e 73 65 3d 62 7d 3b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 45 6e 64 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 5f 64 61 74 61 49 74 65 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 61 74 61 49 74 65 6d 73 7d 2c 67 65 74 5f 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: ys.WebForms.EndRequestEventArgs.initializeBase(this);this._errorHandled=false;this._error=c;this._dataItems=a\|\|{};this._response=b};Sys.WebForms.EndRequestEventArgs.prototype={get_dataItems:function(){return this._dataItems},get_error:function(){return th
2024-11-21 18:33:52 UTC	6524	IN	Data Raw: 75 65 73 74 22 2c 61 29 7d 2c 72 65 6d 6f 76 65 5f 69 6e 69 74 69 61 6c 69 7a 65 52 65 71 75 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 72 65 6d 6f 76 65 48 61 6e 64 6c 65 72 28 22 69 6e 69 74 69 61 6c 69 7a 65 52 65 71 75 65 73 74 22 2c 61 29 7d 2c 61 64 64 5f 70 61 67 65 4c 6f 61 64 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 61 64 64 48 61 6e 64 6c 65 72 28 22 70 61 67 65 4c 6f 61 64 65 64 22 2c 61 29 7d 2c 72 65 6d 6f 76 65 5f 70 61 67 65 4c 6f 61 64 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 Data Ascii: uest",a)},remove_initializeRequest:function(a){this._get_eventHandlerList().removeHandler("initializeRequest",a)},add_pageLoaded:function(a){this._get_eventHandlerList().addHandler("pageLoaded",a)},remove_pageLoaded:function(a){this._get_eventHandlerList(
2024-11-21 18:33:52 UTC	8192	IN	Data Raw: 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 28 61 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 3b 69 66 28 64 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 6e 75 6c 6c 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 61 2e 61 63 74 69 6f 6e 55 72 6c 3b 69 66 28 61 2e 74 72 61 63 6b 46 6f 63 75 73 29 7b 76 61 72 20 63 3d 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 22 5f 5f 4c 41 53 54 46 4f 43 55 53 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 Data Ascii: lientValidate(a.validationGroup);if(d){if(typeof a.actionUrl!="undefined"&&a.actionUrl!=null&&a.actionUrl.length>0)theForm.action=a.actionUrl;if(a.trackFocus){var c=theForm.elements["__LASTFOCUS"];if(typeof c!="undefined"&&c!=null)if(typeof document.activ
2024-11-21 18:33:52 UTC	8192	IN	Data Raw: 66 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 7b 62 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 3b 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 3d 6e 75 6c 6c 7d 76 61 72 20 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2c 61 3d 77 2e 61 63 74 69 6f 6e 3b 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 29 7b 76 61 72 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 69 66 28 72 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 30 2c 72 29 3b 76 61 72 20 6f 3d 22 22 2c 76 3d 22 22 2c 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b Data Ascii: f(this._additionalInput){b.append(this._additionalInput);this._additionalInput=null}var c=new Sys.Net.WebRequest,a=w.action;if(Sys.Browser.agent===Sys.Browser.InternetExplorer){var r=a.indexOf("#");if(r!==-1)a=a.substr(0,r);var o="",v="",m=a.indexOf("?");
2024-11-21 18:33:52 UTC	8192	IN	Data Raw: 72 69 70 74 44 69 73 70 6f 73 65 73 5b 61 5d 2c 62 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 69 66 28 62 2e 65 78 65 63 75 74 6f 72 2e 67 65 74 5f 77 65 62 52 65 71 75 65 73 74 28 29 21 3d 3d 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 63 6f 6d 6d 69 74 43 6f 6e 74 72 6f 6c 73 28 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 2c 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 3f 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e 5f 66 6f 72 6d 2e 61 Data Ascii: riptDisposes[a],b)},_scriptIncludesLoadComplete:function(e,b){if(b.executor.get_webRequest()!==this._request)return;this._commitControls(b.updatePanelData,b.asyncPostBackTimeoutNode?b.asyncPostBackTimeoutNode.content:null);if(b.formActionNode)this._form.a
2024-11-21 18:33:52 UTC	20	IN	Data Raw: 64 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 2e 22 7d 3b Data Ascii: d more than once."};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49746	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 18:33:52 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF57) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=166255 Date: Thu, 21 Nov 2024 18:33:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49748	13.107.138.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:52 UTC	509	OUT	GET /WebResource.axd?d=na8NtmOLcH2-PSkhg-2StciQu83Rz6wegHK-qpykqqPXu1zqQgXBjx-1wJcAzcBoT-1lZ2ky9il7sECAMuM_sInK5ihLxbGkxyJG0zE_XUg1&t=638637567397700854 HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:52 UTC	769	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Fri, 21 Nov 2025 12:55:58 GMT Last-Modified: Sun, 06 Oct 2024 03:25:39 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 4,2102272,0,12496,5927022,2102272,2102272,60 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DDCD958CAF3D4FAB8C59864E5D626136 Ref B: EWR311000105047 Ref C: 2024-11-21T18:33:52Z Date: Thu, 21 Nov 2024 18:33:51 GMT Connection: close
2024-11-21 18:33:52 UTC	1739	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-11-21 18:33:52 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 28 6f 70 74 69 6f 6e 73 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 20 6f 70 74 69 6f 6e 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 76 61 72 20 5f 5f 70 65 6e 64 69 6e 67 43 61 6c 6c 62 61 63 6b 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 5f 5f 73 79 6e 63 68 72 6f 6e 6f 75 73 43 61 6c 6c 42 61 63 6b 49 6e 64 65 78 20 3d 20 2d 31 3b 0d 0a 66 75 6e 63 74 Data Ascii: } } } } } if (options.clientSubmit) { __doPostBack(options.eventTarget, options.eventArgument); }}var __pendingCallbacks = new Array();var __synchronousCallBackIndex = -1;funct
2024-11-21 18:33:52 UTC	5806	IN	Data Raw: 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 26 26 20 28 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 28 72 65 73 70 6f 6e 73 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 20 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 63 6f 6e 74 65 78 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 65 70 61 72 61 74 6f 72 49 6e 64 65 78 20 3d 20 Data Ascii: if ((typeof(callbackObject.errorCallback) != "undefined") && (callbackObject.errorCallback != null)) { callbackObject.errorCallback(response.substring(1), callbackObject.context); } } else { var separatorIndex =
2024-11-21 18:33:53 UTC	7326	IN	Data Raw: 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e Data Ascii: else { defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__non

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:52 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 02a2c6fa-b01e-0001-107b-3b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183353Z-178bfbc474bw8bwphC1NYC38b400000001n000000000r9w8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:52 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 3e5933f5-801e-00ac-572e-3cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183353Z-178bfbc474bv587zhC1NYCny5w00000001tg00000000505m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49747	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:52 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 68 49 31 54 55 33 32 4c 54 30 32 4f 75 2b 4f 6f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 65 33 39 37 38 36 35 61 35 39 62 38 38 65 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: hI1TU32LT02Ou+Oo.1Context: de397865a59b88e1
2024-11-21 18:33:52 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-21 18:33:52 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 68 49 31 54 55 33 32 4c 54 30 32 4f 75 2b 4f 6f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 65 33 39 37 38 36 35 61 35 39 62 38 38 65 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4f 46 46 61 31 31 66 37 53 56 46 49 6c 5a 74 79 37 76 39 6b 75 69 66 6a 65 4f 36 6b 63 6e 77 4a 53 6b 32 54 4f 61 61 30 33 50 62 35 66 73 71 58 6f 51 5a 6e 2f 4e 38 6b 4b 46 2b 47 67 4f 6d 66 46 33 62 4b 79 31 37 34 68 53 68 38 61 54 59 58 62 69 36 35 57 57 79 57 35 38 4b 32 46 6a 41 47 2f 55 79 53 47 69 37 6a 64 33 41 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: hI1TU32LT02Ou+Oo.2Context: de397865a59b88e1<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWOFFa11f7SVFIlZty7v9kuifjeO6kcnwJSk2TOaa03Pb5fsqXoQZn/N8kKF+GgOmfF3bKy174hSh8aTYXbi65WWyW58K2FjAG/UySGi7jd3At
2024-11-21 18:33:52 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 68 49 31 54 55 33 32 4c 54 30 32 4f 75 2b 4f 6f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 65 33 39 37 38 36 35 61 35 39 62 38 38 65 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: hI1TU32LT02Ou+Oo.3Context: de397865a59b88e1<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-21 18:33:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-21 18:33:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 75 42 62 5a 6b 31 41 54 55 75 57 69 4e 59 50 2f 79 33 36 2b 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: suBbZk1ATUuWiNYP/y36+g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:52 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:53 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d8f13441-a01e-0021-5e2d-3c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183353Z-r1d97b99577dd2gchC1TEBz5ys0000000ak000000000c32a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:53 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:53 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:53 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183353Z-178bfbc474b7cbwqhC1NYC8z4n00000001v0000000003x48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:53 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:53 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183353Z-1777c6cb754rz2pghC1TEBghen0000000bag00000000khez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49754	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 18:33:54 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=166308 Date: Thu, 21 Nov 2024 18:33:54 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-21 18:33:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49756	13.107.138.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:53 UTC	566	OUT	GET /ScriptResource.axd?d=0HLq5DZTTienD8-N_shQw5ZYxJ531YzNJKJqeNebSa9UGEpk7XrdNU5LZl1_olnoHu0CDe9ycImuoEn45XNJjmetCZzaU0o55XDr2ZFHoDvWflGWiVu47vTPmEwdlqv0sJ8G3ZXIwil1J7kRiztKx0uiY-1YgLb3JNPFVPoDEmw1&t=64bd211b HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:54 UTC	769	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 26951 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 21 Nov 2025 15:07:49 GMT Last-Modified: Thu, 21 Nov 2024 15:07:49 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,1308,0,26877,175 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 03A3F30FEE8C44DBB62C32B35CD35BCB Ref B: EWR311000105039 Ref C: 2024-11-21T18:33:54Z Date: Thu, 21 Nov 2024 18:33:54 GMT Connection: close
2024-11-21 18:33:54 UTC	2802	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-11-21 18:33:54 UTC	8192	IN	Data Raw: 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 29 20 65 76 65 6e 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 7d 20 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 72 6f 6c 2e 56 61 6c 69 64 61 74 6f 72 73 5b 63 6f 6e 74 72 6f 6c 2e 56 61 6c 69 64 61 74 6f 72 73 2e 6c 65 6e 67 74 68 5d 20 3d 20 76 61 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 45 76 65 6e 74 28 63 6f 6e 74 72 6f 6c 2c 20 65 76 65 6e 74 54 79 70 65 2c 20 66 75 6e 63 74 69 6f 6e 50 72 65 66 69 78 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 65 76 20 3d 20 63 6f 6e 74 72 6f 6c 5b 65 76 65 6e Data Ascii: stopPropagation) event.stopPropagation(); return false; } "); } } control.Validators[control.Validators.length] = val; }}function ValidatorHookupEvent(control, eventType, functionPrefix) { var ev = control[even
2024-11-21 18:33:54 UTC	4743	IN	Data Raw: 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 68 6f 6f 6b 75 70 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 43 6f 6e 74 72 6f 6c 49 44 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 68 6f 6f 6b 75 70 2c 20 76 61 6c 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 41 63 74 69 76 65 20 3d 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 61 6c 69 64 61 74 6f 72 43 6f 6e 76 65 72 74 28 6f 70 2c 20 64 61 74 61 54 79 70 65 2c 20 76 61 6c 29 20 7b 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 47 65 74 46 75 6c 6c 59 65 61 72 28 79 65 61 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 Data Ascii: typeof(val.controlhookup) == "string") { ValidatorHookupControlID(val.controlhookup, val); } } Page_ValidationActive = true;}function ValidatorConvert(op, dataType, val) { function GetFullYear(year) { var
2024-11-21 18:33:54 UTC	8192	IN	Data Raw: 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d 0a 20 20 20 Data Ascii: al.controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined") \|\|
2024-11-21 18:33:54 UTC	3022	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 6f 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 2b 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 79 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 Data Ascii: var length = parseSpecificAttribute(selector, dataValidationAttribute, Page_Validators); length += parseSpecificAttribute(selector, dataValidationSummaryAttribute, Page_ValidationSummaries); return length; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49755	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:53 UTC	734	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:54 UTC	730	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 3331 Content-Type: image/png Last-Modified: Sun, 17 Nov 2024 04:24:44 GMT Accept-Ranges: bytes ETag: "751f1a0a838db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,4271230,0,525568,74 SPRequestDuration: 5 SPIisLatency: 5 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0B5FC411309A46B2ABD0E50EEC30C697 Ref B: EWR311000101049 Ref C: 2024-11-21T18:33:54Z Date: Thu, 21 Nov 2024 18:33:54 GMT Connection: close
2024-11-21 18:33:54 UTC	3331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\k*H@B`s$"n)!@"b#4 !97uhD T:EJ4"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49758	13.107.138.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:53 UTC	595	OUT	GET /ScriptResource.axd?d=2OhCo73OyGBsu9HtdNMGpaB4ebHC0Wow64z70vEbDX016Q4VYy1TsSAjEcPfwjaseGXT81I9NsCoei6l_F9oV_0TKm0mI3SFi913Q4UdnB0fu5rZPbviFP6dhENUHOrzrf1bzlfqe09JhEJ0uEBltljpPB6xlweZYnXjuc4KC4LTBWkTghrKgddl04vYmjrJ0&t=ffffffffb201fd3f HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:54 UTC	777	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 40326 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 21 Nov 2025 18:33:54 GMT Last-Modified: Thu, 21 Nov 2024 18:33:54 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,2102272,73,226,2663709,0,2102272,72 X-AspNet-Version: 4.0.30319 SPRequestDuration: 7 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D11CE79458DA47FABEFD2BF282E1AAC9 Ref B: EWR311000107049 Ref C: 2024-11-21T18:33:54Z Date: Thu, 21 Nov 2024 18:33:54 GMT Connection: close
2024-11-21 18:33:54 UTC	1399	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2024-11-21 18:33:54 UTC	8192	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 65 73 70 6f 6e 73 65 7d 7d 3b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 45 6e 64 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 45 6e 64 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 22 2c 53 79 73 2e 45 76 65 6e 74 41 72 67 73 29 3b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 49 6e 69 74 69 61 6c 69 7a 65 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 62 2c 61 29 7b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 49 6e 69 74 69 61 6c 69 7a 65 52 65 71 75 65 73 74 45 76 65 6e 74 41 72 67 73 2e 69 6e 69 74 69 61 6c 69 7a 65 42 61 73 65 28 74 68 69 73 29 3b 74 68 69 73 2e 5f Data Ascii: function(){return this._response}};Sys.WebForms.EndRequestEventArgs.registerClass("Sys.WebForms.EndRequestEventArgs",Sys.EventArgs);Sys.WebForms.InitializeRequestEventArgs=function(c,b,a){Sys.WebForms.InitializeRequestEventArgs.initializeBase(this);this._
2024-11-21 18:33:54 UTC	6138	IN	Data Raw: 4c 6f 61 64 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 67 65 74 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 28 29 2e 72 65 6d 6f 76 65 48 61 6e 64 6c 65 72 28 22 70 61 67 65 4c 6f 61 64 69 6e 67 22 2c 61 29 7d 2c 61 62 6f 72 74 50 6f 73 74 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 70 72 6f 63 65 73 73 69 6e 67 52 65 71 75 65 73 74 26 26 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 7b 74 68 69 73 2e 5f 72 65 71 75 65 73 74 2e 67 65 74 5f 65 78 65 63 75 74 6f 72 28 29 2e 61 62 6f 72 74 28 29 3b 74 68 69 73 2e 5f 72 65 71 75 65 73 74 3d 6e 75 6c 6c 7d 7d 2c 62 65 67 69 6e 41 73 79 6e 63 50 6f 73 74 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 66 2c 64 2c 65 29 7b 69 66 28 64 26 26 74 79 Data Ascii: Loading:function(a){this._get_eventHandlerList().removeHandler("pageLoading",a)},abortPostBack:function(){if(!this._processingRequest&&this._request){this._request.get_executor().abort();this._request=null}},beginAsyncPostBack:function(c,a,f,d,e){if(d&&ty
2024-11-21 18:33:54 UTC	8192	IN	Data Raw: 43 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 28 61 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 3b 69 66 28 64 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 6e 75 6c 6c 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 61 2e 61 63 74 69 6f 6e 55 72 6c 3b 69 66 28 61 2e 74 72 61 63 6b 46 6f 63 75 73 29 7b 76 61 72 20 63 3d 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 22 5f 5f 4c 41 53 54 46 4f 43 55 53 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 Data Ascii: ClientValidate(a.validationGroup);if(d){if(typeof a.actionUrl!="undefined"&&a.actionUrl!=null&&a.actionUrl.length>0)theForm.action=a.actionUrl;if(a.trackFocus){var c=theForm.elements["__LASTFOCUS"];if(typeof c!="undefined"&&c!=null)if(typeof document.acti
2024-11-21 18:33:54 UTC	8192	IN	Data Raw: 69 66 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 7b 62 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 3b 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 3d 6e 75 6c 6c 7d 76 61 72 20 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2c 61 3d 77 2e 61 63 74 69 6f 6e 3b 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 29 7b 76 61 72 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 69 66 28 72 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 30 2c 72 29 3b 76 61 72 20 6f 3d 22 22 2c 76 3d 22 22 2c 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 Data Ascii: if(this._additionalInput){b.append(this._additionalInput);this._additionalInput=null}var c=new Sys.Net.WebRequest,a=w.action;if(Sys.Browser.agent===Sys.Browser.InternetExplorer){var r=a.indexOf("#");if(r!==-1)a=a.substr(0,r);var o="",v="",m=a.indexOf("?")
2024-11-21 18:33:54 UTC	8192	IN	Data Raw: 63 72 69 70 74 44 69 73 70 6f 73 65 73 5b 61 5d 2c 62 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 69 66 28 62 2e 65 78 65 63 75 74 6f 72 2e 67 65 74 5f 77 65 62 52 65 71 75 65 73 74 28 29 21 3d 3d 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 63 6f 6d 6d 69 74 43 6f 6e 74 72 6f 6c 73 28 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 2c 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 3f 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e 5f 66 6f 72 6d 2e Data Ascii: criptDisposes[a],b)},_scriptIncludesLoadComplete:function(e,b){if(b.executor.get_webRequest()!==this._request)return;this._commitControls(b.updatePanelData,b.asyncPostBackTimeoutNode?b.asyncPostBackTimeoutNode.content:null);if(b.formActionNode)this._form.
2024-11-21 18:33:54 UTC	21	IN	Data Raw: 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 2e 22 7d 3b Data Ascii: ed more than once."};

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:55 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:55 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 239436ba-d01e-0028-7bd5-3b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183355Z-r1d97b99577n5jhbhC1TEB74vn0000000an000000000kzhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:55 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183355Z-1777c6cb7549x5qchC1TEBggbg0000000bp0000000000apf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:55 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183355Z-1777c6cb754dqf99hC1TEB5nps0000000bdg000000002zc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:55 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:55 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183355Z-178bfbc474b9fdhphC1NYCac0n00000001u000000000ab3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:55 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:55 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:55 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183355Z-1777c6cb754rz2pghC1TEBghen0000000b7g00000000x2g9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49765	13.107.138.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:56 UTC	399	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:58 UTC	316	IN	HTTP/1.1 503 Service Unavailable Cache-Control: no-store Content-Length: 8062 Content-Type: text/html X-Azure-ExternalError: 0x800705b4,DNSTimeout X-MSEdge-Ref: Ref A: 5C857316CD9D4B3889AD46346F364143 Ref B: EWR311000107027 Ref C: 2024-11-21T18:33:56Z Date: Thu, 21 Nov 2024 18:33:58 GMT Connection: close
2024-11-21 18:33:58 UTC	8062	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 6e 73 3a 57 65 62 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6c 69 76 65 2e 63 6f 6d 2f 57 65 62 2f 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 53 68 61 72 65 70 6f 69 6e 74 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 Data Ascii: <!DOCTYPE html><html xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" xmlns:Web="http://schemas.live.com/Web/"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>Sharepoint Online</title><meta http-equiv="X-UA-Compatible" c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49767	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:56 UTC	734	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:56 UTC	739	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Tue, 12 Nov 2024 04:11:24 GMT Accept-Ranges: bytes ETag: "d363dbefb834db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,8409600,2,1273,839938,0,3979621,71 SPRequestDuration: 15 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: BBB7E968B731427D839544B7FB6AA79A Ref B: EWR311000104049 Ref C: 2024-11-21T18:33:56Z Date: Thu, 21 Nov 2024 18:33:55 GMT Connection: close
2024-11-21 18:33:56 UTC	1439	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-11-21 18:33:56 UTC	6447	IN	Data Raw: 72 1f ff bb b2 31 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff b0 a8 23 ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a 60 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff da d8 b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d2 d1 a1 ff 8f 8b 13 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 78 72 1f ff bb b2 31 ff d0 c6 37 ff d0 c6 37 ff b3 ab 25 ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a af 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff ff ff ff ff f8 f7 ef ff e1 e0 c0 ff e1 e0 c0 ff ff ff ff ff ff ff ff ff d2 d1 a1 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff Data Ascii: r1777#`xr177%

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:57 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:57 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183357Z-1777c6cb754xjpthhC1TEBexs80000000bbg000000008fyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:57 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:57 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:57 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 918e3103-701e-0097-4a7c-3bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183357Z-1777c6cb754dqb2khC1TEBmk1s0000000bc000000000p02n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:57 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:57 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183357Z-1777c6cb754gvvgfhC1TEBz4rg0000000bd000000000w2wz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:57 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:57 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 3c827ba2-d01e-0014-367c-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183357Z-178bfbc474bnwsh4hC1NYC2ubs0000000200000000004uc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:57 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:33:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:57 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 8b710333-301e-0020-767a-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183357Z-178bfbc474bfw4gbhC1NYCunf400000001ug00000000p49f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:33:58 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49776	13.107.138.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:58 UTC	399	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:33:59 UTC	735	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sun, 17 Nov 2024 04:24:27 GMT Accept-Ranges: bytes ETag: "b4dede96a838db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,151,733206,0,378961,74 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 13FD61425D784B0AB2412D74E419C95B Ref B: EWR311000101051 Ref C: 2024-11-21T18:33:58Z Date: Thu, 21 Nov 2024 18:33:58 GMT Connection: close
2024-11-21 18:33:59 UTC	3439	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-11-21 18:33:59 UTC	4447	IN	Data Raw: 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:59 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:59 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183359Z-178bfbc474bv7whqhC1NYC1fg400000001s000000000x10z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:59 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a56dfe0e-901e-0029-2976-3b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183359Z-r1d97b9957747b9jhC1TEBgyec0000000av000000000ceph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:59 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:33:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183359Z-1777c6cb754dqb2khC1TEBmk1s0000000bfg000000009yd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:59 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183400Z-178bfbc474btvfdfhC1NYCa2en00000001xg00000000em9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:33:59 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:00 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c49e358a-d01e-008e-6463-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183400Z-178bfbc474btrnf9hC1NYCb80g000000021g000000009xcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:00 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49782	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:00 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LZsScEUCWyyrBt7&MD=7FwAxR48 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 18:34:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6c3affb9-eac9-476a-93bf-081fc2d5a7d2 MS-RequestId: 05a0cfd4-7267-479d-91fd-c132ea2d2b60 MS-CV: R+5Nb+VcZUuMrnoA.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 18:33:59 GMT Connection: close Content-Length: 24490
2024-11-21 18:34:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-21 18:34:00 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a83a5f2-e01e-000c-157b-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183402Z-178bfbc474bh5zbqhC1NYCkdug00000001p0000000011nva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:02 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b7984a43-301e-0051-7aa9-3b38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183402Z-r1d97b9957744xz5hC1TEB5bf80000000ahg00000000kgsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:02 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:02 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 3029707a-401e-0047-3163-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183402Z-178bfbc474bwlrhlhC1NYCy3kg00000001x0000000007k69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:02 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183402Z-r1d97b995774n5h6hC1TEBvf840000000apg00000000fpvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:02 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 361c5568-301e-005d-3fb2-3be448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183402Z-r1d97b9957744xz5hC1TEB5bf80000000ar00000000028uh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49789	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:03 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 5a 35 74 76 63 79 4e 55 72 45 36 2f 35 44 32 44 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 65 66 61 31 36 34 38 33 34 34 62 30 64 30 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Z5tvcyNUrE6/5D2D.1Context: 6efa1648344b0d0d
2024-11-21 18:34:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-21 18:34:03 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 5a 35 74 76 63 79 4e 55 72 45 36 2f 35 44 32 44 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 65 66 61 31 36 34 38 33 34 34 62 30 64 30 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4f 46 46 61 31 31 66 37 53 56 46 49 6c 5a 74 79 37 76 39 6b 75 69 66 6a 65 4f 36 6b 63 6e 77 4a 53 6b 32 54 4f 61 61 30 33 50 62 35 66 73 71 58 6f 51 5a 6e 2f 4e 38 6b 4b 46 2b 47 67 4f 6d 66 46 33 62 4b 79 31 37 34 68 53 68 38 61 54 59 58 62 69 36 35 57 57 79 57 35 38 4b 32 46 6a 41 47 2f 55 79 53 47 69 37 6a 64 33 41 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Z5tvcyNUrE6/5D2D.2Context: 6efa1648344b0d0d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWOFFa11f7SVFIlZty7v9kuifjeO6kcnwJSk2TOaa03Pb5fsqXoQZn/N8kKF+GgOmfF3bKy174hSh8aTYXbi65WWyW58K2FjAG/UySGi7jd3At
2024-11-21 18:34:03 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 5a 35 74 76 63 79 4e 55 72 45 36 2f 35 44 32 44 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 65 66 61 31 36 34 38 33 34 34 62 30 64 30 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: Z5tvcyNUrE6/5D2D.3Context: 6efa1648344b0d0d
2024-11-21 18:34:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-21 18:34:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 75 65 4d 75 31 79 39 58 4f 30 6d 45 31 56 52 54 38 76 51 6c 58 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ueMu1y9XO0mE1VRT8vQlXw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:04 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:04 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 81672928-a01e-001e-4184-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183404Z-1777c6cb754xrr98hC1TEB3kag0000000ba000000000grhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:04 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:04 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c296684d-b01e-0053-2a99-3bcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183404Z-r1d97b995777mdbwhC1TEBezag0000000atg000000004x2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:04 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 76e93f39-101e-0034-5559-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183404Z-178bfbc474bv587zhC1NYCny5w00000001rg00000000f0av x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:04 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 20caaba8-701e-005c-0363-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183404Z-178bfbc474bw8bwphC1NYC38b400000001s00000000068xh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:04 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e0915331-401e-000a-1f8a-3b4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183404Z-r1d97b99577hc74hhC1TEBvbns0000000an0000000007wn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:05 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:06 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:06 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: ae8c6dce-101e-008d-4280-3b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183406Z-1777c6cb754b7tdghC1TEBwwa40000000bg000000000swak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:06 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:06 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:06 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: e845eaf5-101e-008e-5d91-3bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183406Z-r1d97b99577ckpmjhC1TEBrzs00000000arg00000000embb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:06 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:06 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 20e2cd06-701e-005c-2869-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183406Z-178bfbc474bbbqrhhC1NYCvw7400000001z000000000n05k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:06 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:06 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 792329fd-401e-0035-1f6c-3b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183406Z-178bfbc474b9xljthC1NYCtw9400000001sg00000000e9ad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:07 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:06 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:07 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183407Z-1777c6cb7544n7p6hC1TEBph9800000000hg00000000hgxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:07 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:08 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:08 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: f154d9af-001e-008d-2f63-3bd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183408Z-178bfbc474bxkclvhC1NYC69g400000001rg00000000qb49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:09 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49800	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:08 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 62 54 64 30 44 58 75 65 5a 30 71 4a 58 42 30 67 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 33 36 30 35 37 33 35 35 64 31 61 61 37 38 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: bTd0DXueZ0qJXB0g.1Context: e36057355d1aa782
2024-11-21 18:34:08 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-21 18:34:08 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 62 54 64 30 44 58 75 65 5a 30 71 4a 58 42 30 67 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 33 36 30 35 37 33 35 35 64 31 61 61 37 38 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4f 46 46 61 31 31 66 37 53 56 46 49 6c 5a 74 79 37 76 39 6b 75 69 66 6a 65 4f 36 6b 63 6e 77 4a 53 6b 32 54 4f 61 61 30 33 50 62 35 66 73 71 58 6f 51 5a 6e 2f 4e 38 6b 4b 46 2b 47 67 4f 6d 66 46 33 62 4b 79 31 37 34 68 53 68 38 61 54 59 58 62 69 36 35 57 57 79 57 35 38 4b 32 46 6a 41 47 2f 55 79 53 47 69 37 6a 64 33 41 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: bTd0DXueZ0qJXB0g.2Context: e36057355d1aa782<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWOFFa11f7SVFIlZty7v9kuifjeO6kcnwJSk2TOaa03Pb5fsqXoQZn/N8kKF+GgOmfF3bKy174hSh8aTYXbi65WWyW58K2FjAG/UySGi7jd3At
2024-11-21 18:34:08 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 62 54 64 30 44 58 75 65 5a 30 71 4a 58 42 30 67 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 33 36 30 35 37 33 35 35 64 31 61 61 37 38 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: bTd0DXueZ0qJXB0g.3Context: e36057355d1aa782<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-21 18:34:09 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-21 18:34:09 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 34 50 56 36 49 35 35 62 42 6b 4b 36 63 34 46 51 30 31 6f 66 70 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 4PV6I55bBkK6c4FQ01ofpw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:08 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:09 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 76e95f1f-101e-0034-7059-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183409Z-178bfbc474bfw4gbhC1NYCunf400000001r0000000015wzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:09 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:08 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:09 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 008bef3b-f01e-001f-677c-3b5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183409Z-1777c6cb754dqf99hC1TEB5nps0000000b7000000000rm3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:09 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:08 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:09 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183409Z-1777c6cb754xjpthhC1TEBexs80000000b6g00000000sep0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:09 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:09 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:09 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183409Z-1777c6cb7549x5qchC1TEBggbg0000000bdg00000000uac6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:09 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:11 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183411Z-178bfbc474bwh9gmhC1NYCy3rs00000001x000000000hdv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:11 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 79a9dcb6-201e-003c-1c7b-3b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183411Z-1777c6cb754mrj2shC1TEB6k7w0000000bpg000000009x1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:11 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:11 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcdc764c-f01e-0052-4963-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183411Z-178bfbc474bpnd5vhC1NYC4vr400000001u000000000ng7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:11 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49810	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:11 UTC	1115	OUT	POST /personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive Content-Length: 1637 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://chamberlinarchitects-my.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:34:11 UTC	1637	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 30 72 5a 52 4c 52 75 74 78 25 32 46 42 30 72 55 4a 47 25 32 42 6f 47 25 32 46 41 25 32 46 25 32 42 32 45 48 77 71 6c 4a 39 59 44 77 71 64 65 48 6f 38 52 4a 56 4b 73 6a 50 51 71 34 55 25 32 42 6f 31 52 4d 6a 72 6a 57 56 34 6e 74 45 54 41 42 54 79 4f 57 67 6c 6a 4c 4b 6b 33 65 30 6a 61 36 77 61 4b 75 6c 47 42 6a 35 73 46 4a 4a 59 74 38 58 35 59 45 71 72 50 79 42 6f 6a 50 54 41 47 64 68 64 66 32 43 6f 44 48 44 4d 45 30 42 4d 73 30 44 7a 43 51 45 32 52 39 50 67 61 50 4e 37 42 72 4e 4a 49 46 Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=0rZRLRutx%2FB0rUJG%2BoG%2FA%2F%2B2EHwqlJ9YDwqdeHo8RJVKsjPQq4U%2Bo1RMjrjWV4ntETABTyOWgljLKk3e0ja6waKulGBj5sFJJYt8X5YEqrPyBojPTAGdhdf2CoDHDME0BMs0DzCQE2R9PgaPN7BrNJIF
2024-11-21 18:34:12 UTC	2010	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 68998 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,0,73,486305,0,687137,71 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: da2266a1-90a1-6000-f005-c569baca9bd5 request-id: da2266a1-90a1-6000-f005-c569baca9bd5 MS-CV: oWYi2qGQAGDwBcVpusqb1Q.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ebf6a44c-38f7-48fe-b5a1-af660cd6569a&destinationEndpoint=Edge-Prod-EWR31r5c&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 473 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C4417012E0EE42E9925116803DCC12FB Ref B: EWR311000105011 Ref C: 2024-11-21T18:34:11Z Date: Thu, 21 Nov 2024 18:34:11 GMT Connection: close
2024-11-21 18:34:12 UTC	2160	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-21 18:34:12 UTC	8192	IN	Data Raw: 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 70 72 6f 67 72 65 73 73 7b 64 Data Ascii: type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{d
2024-11-21 18:34:12 UTC	4144	IN	Data Raw: 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 70 78 20 30 20 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 6d 69 63 72 6f 73 6f 66 74 2d 6c 6f 67 6f 7b 68 65 69 67 68 Data Ascii: inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57px 0 20px}.mobile-logo{margin-top:24px}.microsoft-logo{heigh
2024-11-21 18:34:12 UTC	8192	IN	Data Raw: 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 33 65 33 62 37 30 35 63 2d 65 33 39 37 2d 34 39 61 61 2d 62 36 35 32 2d 61 33 34 39 33 38 32 64 32 34 62 33 22 3e 0d 0a 09 09 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 27 50 65 72 66 6f 72 6d 61 6e 63 65 4c 6f 6e 67 54 61 73 6b 54 69 6d 69 6e 67 27 20 69 6e 20 77 69 6e 64 6f 77 29 7b 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 5f 5f 74 74 69 3d 7b 65 3a 5b 5d 7d 3b 67 2e 6f 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 67 2e 65 3d 67 2e 65 2e 63 6f 6e 63 61 74 28 6c 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 3b 67 2e 6f 2e 6f 62 73 65 72 76 65 28 7b 65 6e 74 72 79 54 79 70 65 73 3a 5b 27 6c 6f 6e 67 74 61 73 6b 27 5d 7d 29 Data Ascii: xt/javascript" nonce="3e3b705c-e397-49aa-b652-a349382d24b3">!function(){if('PerformanceLongTaskTiming' in window){var g=window.__tti={e:[]};g.o=new PerformanceObserver(function(l){g.e=g.e.concat(l.getEntries())});g.o.observe({entryTypes:['longtask']})
2024-11-21 18:34:12 UTC	8192	IN	Data Raw: 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 45 53 36 50 72 6f 6d 69 73 65 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 73 65 74 54 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 72 2c 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 53 3b 65 2b 3d 32 29 7b 28 30 2c 54 Data Ascii: dule.exports=t():"function"==typeof define&&define.amd?define(t):e.ES6Promise=t()}(this,function(){"use strict";function c(e){return"function"==typeof e}function t(){var e=setTimeout;return function(){return e(r,1)}}function r(){for(var e=0;e<S;e+=2){(0,T
2024-11-21 18:34:12 UTC	8192	IN	Data Raw: 69 64 20 30 7d 72 65 71 3d 72 65 71 75 69 72 65 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 73 3d 64 65 66 43 6f 6e 74 65 78 74 4e 61 6d 65 3b 69 66 28 21 69 73 41 72 72 61 79 28 65 29 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 7b 6f 3d 65 3b 69 66 28 69 73 41 72 72 61 79 28 74 29 29 7b 65 3d 74 3b 74 3d 72 3b 72 3d 6e 7d 65 6c 73 65 20 65 3d 5b 5d 7d 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 28 73 3d 6f 2e 63 6f 6e 74 65 78 74 29 3b 69 3d 28 69 3d 67 65 74 4f 77 6e 28 63 6f 6e 74 65 78 74 73 2c 73 29 29 7c 7c 28 63 6f 6e 74 65 78 74 73 5b 73 5d 3d 72 65 71 2e 73 2e 6e 65 77 43 6f 6e 74 65 78 74 28 73 29 29 3b 6f 26 26 69 2e 63 6f 6e 66 69 67 75 72 65 28 6f 29 3b 72 65 74 75 72 6e 20 69 2e 72 Data Ascii: id 0}req=requirejs=function(e,t,r,n){var i,o,s=defContextName;if(!isArray(e)&&"string"!=typeof e){o=e;if(isArray(t)){e=t;t=r;r=n}else e=[]}o&&o.context&&(s=o.context);i=(i=getOwn(contexts,s))\|\|(contexts[s]=req.s.newContext(s));o&&i.configure(o);return i.r
2024-11-21 18:34:12 UTC	8192	IN	Data Raw: 3d 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 3f 5b 74 68 69 73 2e 6d 61 70 2e 69 64 5d 3a 6e 75 6c 6c 3b 74 2e 72 65 71 75 69 72 65 54 79 70 65 3d 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 3f 22 64 65 66 69 6e 65 22 3a 22 72 65 71 75 69 72 65 22 3b 72 65 74 75 72 6e 20 6a 28 74 68 69 73 2e 65 72 72 6f 72 3d 74 29 7d 7d 65 6c 73 65 20 69 3d 6f 3b 74 68 69 73 2e 65 78 70 6f 72 74 73 3d 69 3b 69 66 28 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 21 74 68 69 73 2e 69 67 6e 6f 72 65 29 7b 6d 5b 72 5d 3d 69 3b 69 66 28 72 65 71 2e 6f 6e 52 65 73 6f 75 72 63 65 4c 6f 61 64 29 7b 76 61 72 20 73 3d 5b 5d 3b 65 61 63 68 28 74 68 69 73 2e 64 65 70 4d 61 70 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 2e 70 75 73 68 28 65 2e 6e 6f 72 6d Data Ascii: =this.map.isDefine?[this.map.id]:null;t.requireType=this.map.isDefine?"define":"require";return j(this.error=t)}}else i=o;this.exports=i;if(this.map.isDefine&&!this.ignore){m[r]=i;if(req.onResourceLoad){var s=[];each(this.depMaps,function(e){s.push(e.norm
2024-11-21 18:34:12 UTC	8192	IN	Data Raw: 2c 20 70 61 74 68 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 42 61 63 6b 3b 0d 0a 20 20 20 20 20 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 2e 70 75 73 68 28 6d 6f 64 75 6c 65 49 64 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 20 26 26 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 2e 6c 65 6e 67 74 68 20 3e 3d 20 32 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 64 20 69 6e 20 70 61 74 68 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 74 65 6d 73 20 3d 20 70 61 74 68 73 5b 69 64 5d 3b 0d 0a 20 20 20 Data Ascii: , paths) { var failedModules = failOverState.modulesFalledBack; failedModules.push(moduleId); if (!failOverState.baseUrlFailedOver && failedModules.length >= 2) { for (var id in paths) { var items = paths[id];
2024-11-21 18:34:12 UTC	8192	IN	Data Raw: 54 42 57 6b 54 67 68 72 4b 67 64 64 6c 30 34 76 59 6d 6a 72 4a 30 26 61 6d 70 3b 74 3d 66 66 66 66 66 66 66 66 62 32 30 31 66 64 33 66 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 4f 6e 53 75 62 6d 69 74 28 29 20 7b 0d 0a 69 66 20 28 74 79 70 65 6f 66 28 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 29 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 28 29 20 3d 3d 20 66 61 6c 73 65 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 69 66 20 28 74 79 70 Data Ascii: TBWkTghrKgddl04vYmjrJ0&t=ffffffffb201fd3f" type="text/javascript"></script><script type="text/javascript">//<![CDATA[function WebForm_OnSubmit() {if (typeof(ValidatorOnSubmit) == "function" && ValidatorOnSubmit() == false) return false;if (typ

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:11 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c2dc1527-b01e-0053-5db2-3bcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183411Z-1777c6cb7549j9hhhC1TEBzmcc0000000bf0000000004bkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:11 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:12 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 25a1d219-c01e-007a-1943-3cb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183411Z-178bfbc474bw8bwphC1NYC38b400000001qg00000000ctba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-21 18:34:12 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49809	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:12 UTC	933	OUT	GET /ScriptResource.axd?d=d7AbIk__RR4V2Rx-TSpCKncf6PRukCeYxPNMpbRrp5zNMOFlJr9oc120azlckqN7o7d4gwCiUibzXkmvkXeWZtF2fi6TTziQ1s-2mcuurtyAyZX48_rcdDBS704XVLDt2-erL9E_43IBz_4UGpgmsey82L8U81vqIBPBu5LZmMlrYpSWQ-5vps3h3CUQSLDq0&t=ffffffffb201fd3f HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:34:12 UTC	767	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 21 Nov 2025 17:36:42 GMT Last-Modified: Thu, 21 Nov 2024 17:36:42 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,95,0,26432,22 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AE37D893AA8543348E14912C95C161C7 Ref B: EWR311000107021 Ref C: 2024-11-21T18:34:12Z Date: Thu, 21 Nov 2024 18:34:11 GMT Connection: close
2024-11-21 18:34:12 UTC	3403	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2024-11-21 18:34:12 UTC	8192	IN	Data Raw: 6f 72 2e 63 72 65 61 74 65 28 62 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 70 61 72 61 6d 4e 61 6d 65 3a 61 7d 29 3b 64 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 64 7d 3b 45 72 72 6f 72 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 64 29 7b 76 61 72 20 62 3d 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 28 64 3f 64 3a 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 29 3b 69 66 28 63 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 70 61 72 61 6d 4e 61 6d 65 2c 63 29 3b 69 66 28 Data Ascii: or.create(b,{name:"Sys.ArgumentNullException",paramName:a});d.popStackFrame();return d};Error.argumentOutOfRange=function(c,a,d){var b="Sys.ArgumentOutOfRangeException: "+(d?d:Sys.Res.argumentOutOfRange);if(c)b+="\n"+String.format(Sys.Res.paramName,c);if(
2024-11-21 18:34:12 UTC	4144	IN	Data Raw: 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 26 26 61 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 28 63 29 7d 3b 53 79 73 2e 5f 67 65 74 42 61 73 65 4d 65 74 68 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 63 29 7b 76 61 72 20 62 3d 64 2e 67 65 74 42 61 73 65 54 79 70 65 28 29 3b 69 66 28 62 29 7b 76 61 72 20 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 61 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 53 79 73 2e 5f 69 73 44 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 Data Ascii: ementsInterface&&a.implementsInterface(c)};Sys._getBaseMethod=function(d,e,c){var b=d.getBaseType();if(b){var a=b.prototype[c];return a instanceof Function?a:null}return null};Sys._isDomElement=function(a){var c=false;if(typeof a.nodeType!=="number"){var
2024-11-21 18:34:13 UTC	8192	IN	Data Raw: 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 61 29 77 69 6e 64 6f Data Ascii: Args);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.opera)windo
2024-11-21 18:34:13 UTC	8192	IN	Data Raw: 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 Data Ascii: 1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.Observer.r
2024-11-21 18:34:13 UTC	8192	IN	Data Raw: 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 3b 69 66 28 21 6b 26 26 6e 29 Data Ascii: g()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f;if(!k&&n)
2024-11-21 18:34:13 UTC	8192	IN	Data Raw: 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:function(a)
2024-11-21 18:34:13 UTC	8192	IN	Data Raw: 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a Data Ascii: if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serialization.J
2024-11-21 18:34:13 UTC	8192	IN	Data Raw: 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 Data Ascii: eof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomElement._ge
2024-11-21 18:34:13 UTC	8192	IN	Data Raw: 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c 4f 43 4b 51 55 4f 54 45 22 3a Data Ascii: ){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":case "BLOCKQUOTE":

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:13 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183413Z-1777c6cb754b7tdghC1TEBwwa40000000bp0000000007wts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:13 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 906eedcd-201e-0071-4861-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183413Z-178bfbc474bxkclvhC1NYC69g400000001s000000000m6u9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:13 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:13 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 138215a1-101e-0017-6465-3b47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183413Z-178bfbc474btrnf9hC1NYCb80g000000020g00000000cg8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:13 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 8ce121a2-801e-0035-3fd5-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183413Z-r1d97b99577ndm4rhC1TEBf0ps0000000ayg000000001u18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:13 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 853e1beb-101e-00a2-3cbf-3b9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183414Z-r1d97b99577l6wbzhC1TEB3fwn0000000at000000000m0ff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49821	13.107.138.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:15 UTC	595	OUT	GET /ScriptResource.axd?d=d7AbIk__RR4V2Rx-TSpCKncf6PRukCeYxPNMpbRrp5zNMOFlJr9oc120azlckqN7o7d4gwCiUibzXkmvkXeWZtF2fi6TTziQ1s-2mcuurtyAyZX48_rcdDBS704XVLDt2-erL9E_43IBz_4UGpgmsey82L8U81vqIBPBu5LZmMlrYpSWQ-5vps3h3CUQSLDq0&t=ffffffffb201fd3f HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:34:15 UTC	772	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Fri, 21 Nov 2025 18:34:15 GMT Last-Modified: Thu, 21 Nov 2024 18:34:15 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,238999,0,525568,74 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 208F87D672B24B06BDB86A853D45B668 Ref B: EWR311000102011 Ref C: 2024-11-21T18:34:15Z Date: Thu, 21 Nov 2024 18:34:14 GMT Connection: close
2024-11-21 18:34:15 UTC	3398	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2024-11-21 18:34:16 UTC	8192	IN	Data Raw: 64 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 62 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 70 61 72 61 6d 4e 61 6d 65 3a 61 7d 29 3b 64 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 64 7d 3b 45 72 72 6f 72 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 64 29 7b 76 61 72 20 62 3d 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 28 64 3f 64 3a 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 29 3b 69 66 28 63 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 70 61 72 61 6d 4e 61 6d 65 2c 63 Data Ascii: d=Error.create(b,{name:"Sys.ArgumentNullException",paramName:a});d.popStackFrame();return d};Error.argumentOutOfRange=function(c,a,d){var b="Sys.ArgumentOutOfRangeException: "+(d?d:Sys.Res.argumentOutOfRange);if(c)b+="\n"+String.format(Sys.Res.paramName,c
2024-11-21 18:34:16 UTC	4144	IN	Data Raw: 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 26 26 61 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 28 63 29 7d 3b 53 79 73 2e 5f 67 65 74 42 61 73 65 4d 65 74 68 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 63 29 7b 76 61 72 20 62 3d 64 2e 67 65 74 42 61 73 65 54 79 70 65 28 29 3b 69 66 28 62 29 7b 76 61 72 20 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 61 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 53 79 73 2e 5f 69 73 44 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 22 6e 75 6d 62 65 72 22 29 Data Ascii: .implementsInterface&&a.implementsInterface(c)};Sys._getBaseMethod=function(d,e,c){var b=d.getBaseType();if(b){var a=b.prototype[c];return a instanceof Function?a:null}return null};Sys._isDomElement=function(a){var c=false;if(typeof a.nodeType!=="number")
2024-11-21 18:34:16 UTC	8192	IN	Data Raw: 45 76 65 6e 74 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 61 29 Data Ascii: EventArgs);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.opera)
2024-11-21 18:34:16 UTC	8192	IN	Data Raw: 75 6c 6c 2c 2d 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e 4f 62 73 65 72 Data Ascii: ull,-1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.Obser
2024-11-21 18:34:16 UTC	8192	IN	Data Raw: 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 3b 69 66 28 21 Data Ascii: String()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f;if(!
2024-11-21 18:34:16 UTC	8192	IN	Data Raw: 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 75 6e 63 74 69 Data Ascii: his._upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:functi
2024-11-21 18:34:16 UTC	8192	IN	Data Raw: 3d 3d 2d 31 29 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 Data Ascii: ==-1)if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serializat
2024-11-21 18:34:16 UTC	8192	IN	Data Raw: 66 28 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e Data Ascii: f(typeof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomElemen
2024-11-21 18:34:16 UTC	8192	IN	Data Raw: 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c 4f 43 4b 51 55 Data Ascii: ion(a){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":case "BLOCKQU

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:15 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:15 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ca94d1e-301e-0000-0f9c-3beecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183415Z-1777c6cb7549x5qchC1TEBggbg0000000be000000000urah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:15 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:15 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:16 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 137cb315-101e-0017-3264-3b47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183416Z-178bfbc474bmqmgjhC1NYCy16c00000001ug00000000vtms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:16 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:15 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:16 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183416Z-1777c6cb754mqztshC1TEB4mkc0000000be000000000r1r7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:16 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:15 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c14060eb-d01e-007a-6e7d-3bf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183416Z-1777c6cb754xlpjshC1TEBv8cc0000000bn000000000bqnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:16 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:16 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183416Z-r1d97b9957744xz5hC1TEB5bf80000000ak000000000gy2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:16 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:17 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 4ad18980-501e-008c-067e-3bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183418Z-1777c6cb7544nvmshC1TEBf7qc0000000b8g00000000gntz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 957844e9-801e-008c-4868-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183418Z-178bfbc474b9fdhphC1NYCac0n00000001qg00000000ub8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ecab23c4-c01e-00ad-2963-3ba2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183418Z-178bfbc474bgvl54hC1NYCsfuw00000001y0000000000r0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:18 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:18 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6fd3b960-801e-00ac-6c64-3bfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183418Z-178bfbc474bbcwv4hC1NYCypys00000001s0000000008a8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:34:18 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:18 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183418Z-1777c6cb754rz2pghC1TEBghen0000000b9000000000rr1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:18 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:20 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183420Z-1777c6cb754dqf99hC1TEB5nps0000000b6g00000000ryh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:20 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:20 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 8be6aac8-801e-008c-1a13-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183420Z-r1d97b99577n4dznhC1TEBc1qw0000000awg0000000007ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:20 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:20 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183420Z-178bfbc474b9fdhphC1NYCac0n00000001tg00000000ckww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:34:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:20 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 02a30eba-b01e-0001-5b7b-3b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183420Z-178bfbc474bvjk8shC1NYC83ns00000001s0000000006fgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 9a395038-201e-0071-807e-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183420Z-1777c6cb754n67brhC1TEBcp9c0000000bf000000000sbxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:22 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183422Z-1777c6cb7549j9hhhC1TEBzmcc0000000bfg000000002bgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:22 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1a92378f-b01e-005c-6f7b-3b4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183422Z-1777c6cb754gvvgfhC1TEBz4rg0000000bm0000000007hxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:22 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:22 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c9b33041-e01e-0033-176b-3b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183422Z-178bfbc474bh5zbqhC1NYCkdug00000001ug0000000093zd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:23 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:22 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: c8277487-201e-0051-68a5-3b7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183422Z-r1d97b995774zjnrhC1TEBv1ww0000000am000000000ps36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:22 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:23 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5556881b-d01e-008e-6531-3c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183423Z-178bfbc474bv587zhC1NYCny5w00000001pg00000000pqha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:34:23 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49842	13.107.136.10	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:22 UTC	1178	OUT	POST /personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ HTTP/1.1 Host: chamberlinarchitects-my.sharepoint.com Connection: keep-alive Content-Length: 1649 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://chamberlinarchitects-my.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:34:22 UTC	1649	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 6a 61 71 32 39 30 51 54 4a 52 51 6d 38 57 6b 6d 32 78 63 54 65 4f 7a 41 39 66 65 74 25 32 46 59 43 30 25 32 42 6e 59 7a 49 46 43 38 61 38 4f 66 47 4d 56 30 42 32 33 6f 45 6a 76 37 25 32 46 67 25 32 42 6a 48 6e 47 44 79 65 42 6d 50 70 4b 71 34 38 66 6f 6d 50 50 72 6d 47 6b 56 77 5a 6a 4d 74 25 32 46 67 4f 6d 4e 52 78 37 58 39 30 67 30 51 49 44 4d 65 4e 25 32 42 75 65 49 72 69 61 52 72 71 45 4d 56 6b 6c 32 43 43 37 41 47 59 75 58 6e 7a 75 4f 50 55 73 61 76 4d 48 37 6d 5a 53 79 46 62 52 6a Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=jaq290QTJRQm8Wkm2xcTeOzA9fet%2FYC0%2BnYzIFC8a8OfGMV0B23oEjv7%2Fg%2BjHnGDyeBmPpKq48fomPPrmGkVwZjMt%2FgOmNRx7X90g0QIDMeN%2BueIriaRrqEMVkl2CC7AGYuXnzuOPUsavMH7mZSyFbRj
2024-11-21 18:34:23 UTC	2010	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 68998 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,217,265382,0,344048,71 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: dd2266a1-a082-6000-f005-c29544075aa3 request-id: dd2266a1-a082-6000-f005-c29544075aa3 MS-CV: oWYi3YKgAGDwBcKVRAdaow.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ebf6a44c-38f7-48fe-b5a1-af660cd6569a&destinationEndpoint=Edge-Prod-EWR31r5b&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 479 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FAF4750702824B9E97875BD3BFD140EF Ref B: EWR311000104053 Ref C: 2024-11-21T18:34:23Z Date: Thu, 21 Nov 2024 18:34:23 GMT Connection: close
2024-11-21 18:34:23 UTC	2160	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-21 18:34:23 UTC	8192	IN	Data Raw: 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 70 72 6f 67 72 65 73 73 7b 64 Data Ascii: type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{d
2024-11-21 18:34:23 UTC	4144	IN	Data Raw: 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 70 78 20 30 20 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 6d 69 63 72 6f 73 6f 66 74 2d 6c 6f 67 6f 7b 68 65 69 67 68 Data Ascii: inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57px 0 20px}.mobile-logo{margin-top:24px}.microsoft-logo{heigh
2024-11-21 18:34:24 UTC	8192	IN	Data Raw: 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 32 37 35 64 35 63 34 61 2d 37 39 39 33 2d 34 35 30 39 2d 61 62 64 32 2d 32 38 64 38 30 33 61 30 64 63 34 38 22 3e 0d 0a 09 09 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 27 50 65 72 66 6f 72 6d 61 6e 63 65 4c 6f 6e 67 54 61 73 6b 54 69 6d 69 6e 67 27 20 69 6e 20 77 69 6e 64 6f 77 29 7b 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 5f 5f 74 74 69 3d 7b 65 3a 5b 5d 7d 3b 67 2e 6f 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 67 2e 65 3d 67 2e 65 2e 63 6f 6e 63 61 74 28 6c 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 3b 67 2e 6f 2e 6f 62 73 65 72 76 65 28 7b 65 6e 74 72 79 54 79 70 65 73 3a 5b 27 6c 6f 6e 67 74 61 73 6b 27 5d 7d 29 Data Ascii: xt/javascript" nonce="275d5c4a-7993-4509-abd2-28d803a0dc48">!function(){if('PerformanceLongTaskTiming' in window){var g=window.__tti={e:[]};g.o=new PerformanceObserver(function(l){g.e=g.e.concat(l.getEntries())});g.o.observe({entryTypes:['longtask']})
2024-11-21 18:34:24 UTC	8192	IN	Data Raw: 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 45 53 36 50 72 6f 6d 69 73 65 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 73 65 74 54 69 6d 65 6f 75 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 72 2c 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 53 3b 65 2b 3d 32 29 7b 28 30 2c 54 Data Ascii: dule.exports=t():"function"==typeof define&&define.amd?define(t):e.ES6Promise=t()}(this,function(){"use strict";function c(e){return"function"==typeof e}function t(){var e=setTimeout;return function(){return e(r,1)}}function r(){for(var e=0;e<S;e+=2){(0,T
2024-11-21 18:34:24 UTC	8192	IN	Data Raw: 69 64 20 30 7d 72 65 71 3d 72 65 71 75 69 72 65 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 73 3d 64 65 66 43 6f 6e 74 65 78 74 4e 61 6d 65 3b 69 66 28 21 69 73 41 72 72 61 79 28 65 29 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 7b 6f 3d 65 3b 69 66 28 69 73 41 72 72 61 79 28 74 29 29 7b 65 3d 74 3b 74 3d 72 3b 72 3d 6e 7d 65 6c 73 65 20 65 3d 5b 5d 7d 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 28 73 3d 6f 2e 63 6f 6e 74 65 78 74 29 3b 69 3d 28 69 3d 67 65 74 4f 77 6e 28 63 6f 6e 74 65 78 74 73 2c 73 29 29 7c 7c 28 63 6f 6e 74 65 78 74 73 5b 73 5d 3d 72 65 71 2e 73 2e 6e 65 77 43 6f 6e 74 65 78 74 28 73 29 29 3b 6f 26 26 69 2e 63 6f 6e 66 69 67 75 72 65 28 6f 29 3b 72 65 74 75 72 6e 20 69 2e 72 Data Ascii: id 0}req=requirejs=function(e,t,r,n){var i,o,s=defContextName;if(!isArray(e)&&"string"!=typeof e){o=e;if(isArray(t)){e=t;t=r;r=n}else e=[]}o&&o.context&&(s=o.context);i=(i=getOwn(contexts,s))\|\|(contexts[s]=req.s.newContext(s));o&&i.configure(o);return i.r
2024-11-21 18:34:24 UTC	8192	IN	Data Raw: 3d 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 3f 5b 74 68 69 73 2e 6d 61 70 2e 69 64 5d 3a 6e 75 6c 6c 3b 74 2e 72 65 71 75 69 72 65 54 79 70 65 3d 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 3f 22 64 65 66 69 6e 65 22 3a 22 72 65 71 75 69 72 65 22 3b 72 65 74 75 72 6e 20 6a 28 74 68 69 73 2e 65 72 72 6f 72 3d 74 29 7d 7d 65 6c 73 65 20 69 3d 6f 3b 74 68 69 73 2e 65 78 70 6f 72 74 73 3d 69 3b 69 66 28 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 21 74 68 69 73 2e 69 67 6e 6f 72 65 29 7b 6d 5b 72 5d 3d 69 3b 69 66 28 72 65 71 2e 6f 6e 52 65 73 6f 75 72 63 65 4c 6f 61 64 29 7b 76 61 72 20 73 3d 5b 5d 3b 65 61 63 68 28 74 68 69 73 2e 64 65 70 4d 61 70 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 2e 70 75 73 68 28 65 2e 6e 6f 72 6d Data Ascii: =this.map.isDefine?[this.map.id]:null;t.requireType=this.map.isDefine?"define":"require";return j(this.error=t)}}else i=o;this.exports=i;if(this.map.isDefine&&!this.ignore){m[r]=i;if(req.onResourceLoad){var s=[];each(this.depMaps,function(e){s.push(e.norm
2024-11-21 18:34:24 UTC	8192	IN	Data Raw: 2c 20 70 61 74 68 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 42 61 63 6b 3b 0d 0a 20 20 20 20 20 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 2e 70 75 73 68 28 6d 6f 64 75 6c 65 49 64 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 20 26 26 20 66 61 69 6c 65 64 4d 6f 64 75 6c 65 73 2e 6c 65 6e 67 74 68 20 3e 3d 20 32 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 64 20 69 6e 20 70 61 74 68 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 74 65 6d 73 20 3d 20 70 61 74 68 73 5b 69 64 5d 3b 0d 0a 20 20 20 Data Ascii: , paths) { var failedModules = failOverState.modulesFalledBack; failedModules.push(moduleId); if (!failOverState.baseUrlFailedOver && failedModules.length >= 2) { for (var id in paths) { var items = paths[id];
2024-11-21 18:34:24 UTC	8192	IN	Data Raw: 54 42 57 6b 54 67 68 72 4b 67 64 64 6c 30 34 76 59 6d 6a 72 4a 30 26 61 6d 70 3b 74 3d 66 66 66 66 66 66 66 66 62 32 30 31 66 64 33 66 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 4f 6e 53 75 62 6d 69 74 28 29 20 7b 0d 0a 69 66 20 28 74 79 70 65 6f 66 28 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 29 20 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 56 61 6c 69 64 61 74 6f 72 4f 6e 53 75 62 6d 69 74 28 29 20 3d 3d 20 66 61 6c 73 65 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 69 66 20 28 74 79 70 Data Ascii: TBWkTghrKgddl04vYmjrJ0&t=ffffffffb201fd3f" type="text/javascript"></script><script type="text/javascript">//<![CDATA[function WebForm_OnSubmit() {if (typeof(ValidatorOnSubmit) == "function" && ValidatorOnSubmit() == false) return false;if (typ

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:24 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:25 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:24 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 6b04d5e8-e01e-000c-65ad-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183424Z-1777c6cb754dqf99hC1TEB5nps0000000b9000000000g9f5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:25 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:24 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:25 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 848b8d5b-d01e-00a1-7163-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183425Z-178bfbc474bwh9gmhC1NYCy3rs00000001w000000000pz85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:25 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:24 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:25 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6a1e2df9-c01e-008d-338c-3a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183425Z-1777c6cb7549j9hhhC1TEBzmcc0000000bg00000000002b7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:25 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:24 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:25 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:25 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e7fd51b1-801e-0067-1163-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183425Z-178bfbc474b9xljthC1NYCtw9400000001n00000000141f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:25 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:25 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:25 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:25 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: fa7019cc-d01e-0017-4ba1-3bb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183425Z-r1d97b995777mdbwhC1TEBezag0000000atg000000004yww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:25 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49850	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 75 38 71 69 55 48 48 46 42 30 36 4c 6c 62 36 4e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 32 61 62 30 65 61 61 39 65 32 32 65 62 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: u8qiUHHFB06Llb6N.1Context: 7b2ab0eaa9e22eb1
2024-11-21 18:34:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-21 18:34:26 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 75 38 71 69 55 48 48 46 42 30 36 4c 6c 62 36 4e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 32 61 62 30 65 61 61 39 65 32 32 65 62 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4f 46 46 61 31 31 66 37 53 56 46 49 6c 5a 74 79 37 76 39 6b 75 69 66 6a 65 4f 36 6b 63 6e 77 4a 53 6b 32 54 4f 61 61 30 33 50 62 35 66 73 71 58 6f 51 5a 6e 2f 4e 38 6b 4b 46 2b 47 67 4f 6d 66 46 33 62 4b 79 31 37 34 68 53 68 38 61 54 59 58 62 69 36 35 57 57 79 57 35 38 4b 32 46 6a 41 47 2f 55 79 53 47 69 37 6a 64 33 41 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: u8qiUHHFB06Llb6N.2Context: 7b2ab0eaa9e22eb1<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWOFFa11f7SVFIlZty7v9kuifjeO6kcnwJSk2TOaa03Pb5fsqXoQZn/N8kKF+GgOmfF3bKy174hSh8aTYXbi65WWyW58K2FjAG/UySGi7jd3At
2024-11-21 18:34:26 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 75 38 71 69 55 48 48 46 42 30 36 4c 6c 62 36 4e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 32 61 62 30 65 61 61 39 65 32 32 65 62 31 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: u8qiUHHFB06Llb6N.3Context: 7b2ab0eaa9e22eb1
2024-11-21 18:34:27 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-21 18:34:27 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 59 74 48 46 63 6d 6a 68 6d 30 6d 68 79 4f 72 47 58 65 6f 45 2f 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: YtHFcmjhm0mhyOrGXeoE/A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:26 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:27 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:27 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 4ee4281a-701e-0098-0fa0-3b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183427Z-r1d97b995774zjnrhC1TEBv1ww0000000ak000000000rutm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:27 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:27 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:27 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 7d2469a6-a01e-001e-4aa9-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183427Z-r1d97b9957744xz5hC1TEB5bf80000000an000000000chpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:27 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:27 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183427Z-178bfbc474bw8bwphC1NYC38b400000001t0000000001aq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:27 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:27 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183427Z-1777c6cb754b7tdghC1TEBwwa40000000bqg000000001cp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:27 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:27 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183427Z-178bfbc474bwh9gmhC1NYCy3rs00000001zg000000006wg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:29 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183429Z-r1d97b99577hc74hhC1TEBvbns0000000ap0000000007q8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:29 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a8ea751-101e-007a-417b-3b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183429Z-178bfbc474b9xljthC1NYCtw9400000001ug0000000069q9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:29 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 8dc50228-301e-0020-23c1-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183429Z-r1d97b9957744xz5hC1TEB5bf80000000ah000000000q1q8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49856	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:29 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 51 4d 71 53 77 74 48 73 33 45 2b 73 66 35 33 37 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 62 35 38 32 32 31 34 35 35 61 61 62 39 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: QMqSwtHs3E+sf537.1Context: b9b58221455aab98
2024-11-21 18:34:29 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-21 18:34:29 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 51 4d 71 53 77 74 48 73 33 45 2b 73 66 35 33 37 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 62 35 38 32 32 31 34 35 35 61 61 62 39 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4f 46 46 61 31 31 66 37 53 56 46 49 6c 5a 74 79 37 76 39 6b 75 69 66 6a 65 4f 36 6b 63 6e 77 4a 53 6b 32 54 4f 61 61 30 33 50 62 35 66 73 71 58 6f 51 5a 6e 2f 4e 38 6b 4b 46 2b 47 67 4f 6d 66 46 33 62 4b 79 31 37 34 68 53 68 38 61 54 59 58 62 69 36 35 57 57 79 57 35 38 4b 32 46 6a 41 47 2f 55 79 53 47 69 37 6a 64 33 41 74 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: QMqSwtHs3E+sf537.2Context: b9b58221455aab98<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWOFFa11f7SVFIlZty7v9kuifjeO6kcnwJSk2TOaa03Pb5fsqXoQZn/N8kKF+GgOmfF3bKy174hSh8aTYXbi65WWyW58K2FjAG/UySGi7jd3At
2024-11-21 18:34:29 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 51 4d 71 53 77 74 48 73 33 45 2b 73 66 35 33 37 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 62 35 38 32 32 31 34 35 35 61 61 62 39 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: QMqSwtHs3E+sf537.3Context: b9b58221455aab98<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-21 18:34:30 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-21 18:34:30 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 44 4c 49 76 6d 37 44 67 55 53 64 32 61 69 56 4f 53 52 65 53 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: jDLIvm7DgUSd2aiVOSReSg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:29 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183429Z-1777c6cb7544nvmshC1TEBf7qc0000000b5000000000xm0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:29 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:29 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 610e5600-501e-005b-46b5-3bd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183429Z-r1d97b995774n5h6hC1TEBvf840000000apg00000000fsgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:30 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:31 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:31 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 64a4ee2c-301e-0099-6775-3b6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183431Z-178bfbc474bv587zhC1NYCny5w00000001u0000000002nan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:32 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 538e08fd-a01e-0032-4b7d-3b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183431Z-1777c6cb7544nvmshC1TEBf7qc0000000b6g00000000r83m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:32 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:32 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 110996dd-801e-0048-7360-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183431Z-178bfbc474bp8mkvhC1NYCzqnn00000001n000000000vegt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:34:32 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183432Z-r1d97b99577n4dznhC1TEBc1qw0000000atg000000008bbb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:31 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: fce879e9-f01e-0052-0d66-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183432Z-178bfbc474bw8bwphC1NYC38b400000001k00000000111fh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:33 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e7fe902a-801e-0067-6164-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183434Z-178bfbc474bfw4gbhC1NYCunf400000001y0000000003rek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:33 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183434Z-178bfbc474bv7whqhC1NYC1fg400000001rg000000010aeh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:33 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183434Z-178bfbc474btvfdfhC1NYCa2en00000001x000000000gqsf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:34 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 5a6b30d1-101e-00a2-7c5b-3b9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183434Z-178bfbc474btrnf9hC1NYCb80g00000001yg00000000q571 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:34 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183434Z-r1d97b99577d6qrbhC1TEBux5s0000000ar000000000uwgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:36 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:36 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 2620e4ad-c01e-008d-6675-3b2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183436Z-1777c6cb7549j9hhhC1TEBzmcc0000000be00000000083xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:36 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:36 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:36 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183436Z-r1d97b99577tssmjhC1TEB8kan0000000ah000000000p7ww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:36 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:36 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:36 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 99b43a4d-701e-003e-13dc-3b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183436Z-r1d97b9957789nh9hC1TEBxha80000000az0000000001upf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:36 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:36 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:36 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183436Z-178bfbc474bpnd5vhC1NYC4vr400000001u000000000nks5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:36 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:36 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c7391ddf-401e-0064-3568-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183436Z-1777c6cb754vxwc9hC1TEBykgw0000000bfg00000000cc0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:36 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:38 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:38 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:38 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183438Z-1777c6cb754dqf99hC1TEB5nps0000000bbg00000000aufc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:38 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:38 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:38 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:38 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: c06a529d-f01e-0085-0e9a-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183438Z-r1d97b99577d6qrbhC1TEBux5s0000000ay0000000004rtn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:38 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:38 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:38 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183438Z-r1d97b99577n4dznhC1TEBc1qw0000000awg0000000008hp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:38 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:39 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 20e9f7cf-701e-005c-216c-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183438Z-1777c6cb754xjpthhC1TEBexs80000000b8g00000000hwww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:38 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:39 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:39 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 57f4d0d3-201e-0033-0b7c-3bb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183439Z-1777c6cb754lvj6mhC1TEBke940000000bgg00000000fax6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49882	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:38 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LZsScEUCWyyrBt7&MD=7FwAxR48 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 18:34:39 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 263223cd-f8f4-4663-b709-beb574807a0f MS-RequestId: fb894a38-73a3-46d4-9a50-31308b499538 MS-CV: xjwebeUUjUyDhi62.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 18:34:38 GMT Connection: close Content-Length: 30005
2024-11-21 18:34:39 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-21 18:34:39 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:40 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 739b7327-201e-003f-38a1-3b6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183440Z-r1d97b99577kk29chC1TEBemmg0000000arg00000000gswp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:40 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:40 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 8945419b-e01e-0003-217d-3b0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183440Z-178bfbc474btrnf9hC1NYCb80g00000001w0000000011gzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:40 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c743bc84-701e-006f-2bdb-3bafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183441Z-r1d97b99577ckpmjhC1TEBrzs00000000aw0000000002may x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:40 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183441Z-r1d97b99577sdxndhC1TEBec5n0000000ax00000000090s9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:41 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:41 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4a98b9d9-501e-008c-636d-3bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183441Z-178bfbc474bwlrhlhC1NYCy3kg00000001xg00000000646c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:42 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:43 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183443Z-178bfbc474bh5zbqhC1NYCkdug00000001r000000000r5a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:42 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:43 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183443Z-1777c6cb754lv4cqhC1TEB13us0000000beg00000000e8ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:34:42 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:34:43 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:34:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T183443Z-r1d97b99577tssmjhC1TEB8kan0000000ah000000000p8ea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:34:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5952, Parent PID: 1876

General

Target ID:	0
Start time:	13:33:40
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2472, Parent PID: 5952

General

Target ID:	2
Start time:	13:33:43
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=2024,i,7424622979505011030,4121814623453497523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1076, Parent PID: 1876

General

Target ID:	3
Start time:	13:33:45
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9	HTTP Parser: Number of links: 0
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: Number of links: 0

Source: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9	HTTP Parser: Title: Sharing Link Validation does not match URL
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: Title: Sharing Link Validation does not match URL

Source: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))

Source: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9	HTTP Parser: No <meta name="author".. found
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: No <meta name="author".. found
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: No <meta name="author".. found
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: No <meta name="author".. found
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: No <meta name="author".. found

Source: https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9	HTTP Parser: No <meta name="copyright".. found
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: No <meta name="copyright".. found
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: No <meta name="copyright".. found
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: No <meta name="copyright".. found
Source: https://chamberlinarchitects-my.sharepoint.com/personal/jwest_chamberlinarchitects_com/_layouts/15/guestaccess.aspx?e=5%3abFdAss&at=9&share=EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.21

Source: global traffic	DNS traffic detected: DNS query: chamberlinarchitects-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: spo.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Windows Analysis Report
https://chamberlinarchitects-my.sharepoint.com/:f:/p/jwest/EtPC6NiaPvBBn1XRTXDjVPkBIN9Ez5tM2QvACYMx9CgEbQ?e=5%3abFdAss&at=9